imPC@ndo IT

Tracker / CVE-2010-2955

CVE-2010-2955

Low 2.1

The cfg80211_wext_giwessid function in net/wireless/wext-compat.c in the Linux kernel before 2.6.36-rc3-next-20100831 does not properly initialize certain structure members, which allows local users to leverage an off-by-one error in the ioctl_standard_iw_point function in net/wireless/wext-core.c, and obtain potentially sensitive information from kernel heap memory, via vectors involving an SIOCGIWESSID ioctl call that specifies a large buffer size.

Affected products and versions

canonical ubuntu_linux
linux linux_kernel
linux linux_kernel · … → 2.6.36
opensuse opensuse
suse linux_enterprise_desktop
suse linux_enterprise_real_time_extension
suse linux_enterprise_server

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References