Lucene search

RedhatCVE-2011-2494

HistoryJun 13, 2012 - 10:24 a.m.

CVE-2011-2494

2012-06-1310:24:55

CWE-200

redhat

web.nvd.nist.gov

cve

linux kernel

taskstats.c

vulnerability

nvd

security

netlink socket

sensitive data

local user

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.6

Confidence

High

EPSS

Percentile

5.1%

JSON

kernel/taskstats.c in the Linux kernel before 3.1 allows local users to obtain sensitive I/O statistics by sending taskstats commands to a netlink socket, as demonstrated by discovering the length of another user’s password.

Affected configurations

Nvd

Node

linuxlinux_kernelRange≤3.0.34

linuxlinux_kernelMatch3.0.1

linuxlinux_kernelMatch3.0.2

linuxlinux_kernelMatch3.0.3

linuxlinux_kernelMatch3.0.4

linuxlinux_kernelMatch3.0.5

linuxlinux_kernelMatch3.0.6

linuxlinux_kernelMatch3.0.7

linuxlinux_kernelMatch3.0.8

linuxlinux_kernelMatch3.0.9

linuxlinux_kernelMatch3.0.10

linuxlinux_kernelMatch3.0.11

linuxlinux_kernelMatch3.0.12

linuxlinux_kernelMatch3.0.13

linuxlinux_kernelMatch3.0.14

linuxlinux_kernelMatch3.0.15

linuxlinux_kernelMatch3.0.16

linuxlinux_kernelMatch3.0.17

linuxlinux_kernelMatch3.0.18

linuxlinux_kernelMatch3.0.19

linuxlinux_kernelMatch3.0.20

linuxlinux_kernelMatch3.0.21

linuxlinux_kernelMatch3.0.22

linuxlinux_kernelMatch3.0.23

linuxlinux_kernelMatch3.0.24

linuxlinux_kernelMatch3.0.25

linuxlinux_kernelMatch3.0.26

linuxlinux_kernelMatch3.0.27

linuxlinux_kernelMatch3.0.28

linuxlinux_kernelMatch3.0.29

linuxlinux_kernelMatch3.0.30

linuxlinux_kernelMatch3.0.31

linuxlinux_kernelMatch3.0.32

linuxlinux_kernelMatch3.0.33

VendorProductVersionCPE
linuxlinux_kernel3.0.4cpe:/o:linux:linux_kernel:3.0.4:::
linuxlinux_kernel3.0.7cpe:/o:linux:linux_kernel:3.0.7:::
linuxlinux_kernel3.0.22cpe:/o:linux:linux_kernel:3.0.22:::
linuxlinux_kernel3.0.33cpe:/o:linux:linux_kernel:3.0.33:::
linuxlinux_kernel3.0.18cpe:/o:linux:linux_kernel:3.0.18:::
linuxlinux_kernel3.0.1cpe:/o:linux:linux_kernel:3.0.1:::
linuxlinux_kernel3.0.25cpe:/o:linux:linux_kernel:3.0.25:::
linuxlinux_kernel3.0.3cpe:/o:linux:linux_kernel:3.0.3:::
linuxlinux_kernel3.0.9cpe:/o:linux:linux_kernel:3.0.9:::
linuxlinux_kernel3.0.17cpe:/o:linux:linux_kernel:3.0.17:::

Vendor	Product	Version	CPE
linux	linux_kernel	3.0.4	cpe:/o:linux:linux_kernel:3.0.4:::
linux	linux_kernel	3.0.7	cpe:/o:linux:linux_kernel:3.0.7:::
linux	linux_kernel	3.0.22	cpe:/o:linux:linux_kernel:3.0.22:::
linux	linux_kernel	3.0.33	cpe:/o:linux:linux_kernel:3.0.33:::
linux	linux_kernel	3.0.18	cpe:/o:linux:linux_kernel:3.0.18:::
linux	linux_kernel	3.0.1	cpe:/o:linux:linux_kernel:3.0.1:::
linux	linux_kernel	3.0.25	cpe:/o:linux:linux_kernel:3.0.25:::
linux	linux_kernel	3.0.3	cpe:/o:linux:linux_kernel:3.0.3:::
linux	linux_kernel	3.0.9	cpe:/o:linux:linux_kernel:3.0.9:::
linux	linux_kernel	3.0.17	cpe:/o:linux:linux_kernel:3.0.17:::