CVEvulnerability
CVE-2010-2942
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2010-09-21
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-401
Description
The actions implementation in the network queueing functionality in the Linux kernel before 2.6.36-rc2 does not properly initialize certain structure members when performing dump operations, which allows local users to obtain potentially sensitive information from kernel memory via vectors related to (1) the tcf_gact_dump function in net/sched/act_gact.c, (2) the tcf_mirred_dump function in net/sched/act_mirred.c, (3) the tcf_nat_dump function in net/sched/act_nat.c, (4) the tcf_simp_dump function in net/sched/act_simple.c, and (5) the tcf_skbedit_dump function in net/sched/act_skbedit.c.
Affected configurations
• linux linux kernel (<= 2.6.35.13)
• linux linux kernel 2.6.36
• canonical ubuntu linux 6.06
• canonical ubuntu linux 8.04
• canonical ubuntu linux 9.04
• canonical ubuntu linux 9.10
• canonical ubuntu linux 10.04
• canonical ubuntu linux 10.10
• opensuse opensuse 11.1
• opensuse opensuse 11.3
• suse suse linux enterprise desktop 10
• suse suse linux enterprise desktop 11
• suse suse linux enterprise server 10
• suse suse linux enterprise server 11
• avaya aura communication manager 5.2
• avaya aura presence services 6.0
• avaya aura presence services 6.1
• avaya aura presence services 6.1.1
• avaya aura session manager 1.1
• avaya aura session manager 5.2
• avaya aura session manager 6.0
• avaya aura system manager 5.2
• avaya aura system manager 6.0
• avaya aura system manager 6.1
• avaya aura system manager 6.1.1
• avaya aura system platform 1.1
• avaya aura system platform 6.0
• avaya iq 5.0
• avaya iq 5.1
• avaya voice portal 5.0
• avaya voice portal 5.1
• vmware esx 4.0
• vmware esx 4.1
Related
Weakness · CWE (1)
- CWE-401 Missing Release of Memory after Effective Lifetime weakness
References
- http://git.kernel.org/?p=linux/kernel/git/davem/net-2.6.git%3Ba=commit%3Bh=1c40be12f7d8ca1d387510d39787b12e512a7ce8 git.kernel.org
- http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00004.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00005.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00000.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html Mailing List, Third Party Advisory
- http://patchwork.ozlabs.org/patch/61857/ Mailing List, Patch, Third Party Advisory
- http://secunia.com/advisories/41512 Broken Link
- http://secunia.com/advisories/46397 Broken Link
- http://support.avaya.com/css/P8/documents/100113326 Third Party Advisory
- http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.36-rc2 Broken Link
- http://www.openwall.com/lists/oss-security/2010/08/18/1 Mailing List, Patch, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2010/08/19/4 Mailing List, Patch, Third Party Advisory
- http://www.redhat.com/support/errata/RHSA-2010-0723.html Broken Link
- http://www.redhat.com/support/errata/RHSA-2010-0771.html Broken Link
- http://www.redhat.com/support/errata/RHSA-2010-0779.html Broken Link
- http://www.securityfocus.com/archive/1/520102/100/0/threaded Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/42529 Third Party Advisory, VDB Entry
- http://www.ubuntu.com/usn/USN-1000-1 Third Party Advisory
- http://www.vmware.com/security/advisories/VMSA-2011-0012.html Third Party Advisory
- http://www.vupen.com/english/advisories/2010/2430 Broken Link
- http://www.vupen.com/english/advisories/2011/0298 Broken Link
- https://bugzilla.redhat.com/show_bug.cgi?id=624903 Issue Tracking, Patch, Third Party Advisory
- http://git.kernel.org/?p=linux/kernel/git/davem/net-2.6.git%3Ba=commit%3Bh=1c40be12f7d8ca1d387510d39787b12e512a7ce8 git.kernel.org
- http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00004.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00005.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00000.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html Mailing List, Third Party Advisory
- http://patchwork.ozlabs.org/patch/61857/ Mailing List, Patch, Third Party Advisory
- http://secunia.com/advisories/41512 Broken Link
- http://secunia.com/advisories/46397 Broken Link
- http://support.avaya.com/css/P8/documents/100113326 Third Party Advisory
- http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.36-rc2 Broken Link
- http://www.openwall.com/lists/oss-security/2010/08/18/1 Mailing List, Patch, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2010/08/19/4 Mailing List, Patch, Third Party Advisory
- http://www.redhat.com/support/errata/RHSA-2010-0723.html Broken Link
- http://www.redhat.com/support/errata/RHSA-2010-0771.html Broken Link
- http://www.redhat.com/support/errata/RHSA-2010-0779.html Broken Link
- http://www.securityfocus.com/archive/1/520102/100/0/threaded Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/42529 Third Party Advisory, VDB Entry
- http://www.ubuntu.com/usn/USN-1000-1 Third Party Advisory
- http://www.vmware.com/security/advisories/VMSA-2011-0012.html Third Party Advisory
- http://www.vupen.com/english/advisories/2010/2430 Broken Link
- http://www.vupen.com/english/advisories/2011/0298 Broken Link
- https://bugzilla.redhat.com/show_bug.cgi?id=624903 Issue Tracking, Patch, Third Party Advisory