Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-4071 State: PUBLISHED Published: 2011-01-20T18:00:00Z Last Updated: 2024-09-16T17:58:40.192Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in AgentTicketZoom in OTRS 2.4.x before 2.4.9, when RichText is enabled, allows remote attackers to inject arbitrary web script or HTML via JavaScript in an HTML e-mail. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/68882 - http://secunia.com/advisories/41978 - http://bugs.gentoo.org/342687 - http://otrs.org/advisory/OSA-2010-03-en/ - http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html - http://www.vuxml.org/freebsd/96e776c
-en/ - http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html - http://www.vuxml.org/freebsd/96e776c7-e75c-11df-8f26-00151735203a.html
CVE ID: CVE-2010-4072 State: PUBLISHED Published: 2010-11-29T15:00:00 Last Updated: 2024-08-07T03:34:37.735Z Vendors: n/a Products: n/a Problem Types: n/a Description: The copy_shmid_to_user function in ipc/shm.c in the Linux kernel before 2.6.37-rc1 does not initialize a certain structure, which allows local users to obtain potentially sensitive information from kernel stack memory via vectors related to the shmctl system call and the "old shm interface." Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00004.html - http://secunia.com/advisories/42778 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.
011-01/msg00004.html - http://secunia.com/advisories/42778 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=3af54c9bd9e6f14f896aac1bb0e8405ae0bc7a44 - http://www.securityfocus.com/archive/1/520102/100/0/threaded - http://www.redhat.com/support/errata/RHSA-2011-0017.html - http://secunia.com/advisories/46397 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.html - http://secunia.com/advisories/42932 - https://bugzilla.redhat.com/show_bug.cgi?id=648656 - http://www.securityfocus.com/bid/45054 - http://www.ubuntu.com/usn/USN-1041-1 - http://www.redhat.com/support/errata/RHSA-2011-0007.html - http://www.vupen.com/english/advisories/2011/0124
SN-1041-1 - http://www.redhat.com/support/errata/RHSA-2011-0007.html - http://www.vupen.com/english/advisories/2011/0124 - http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html - http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.html - http://www.vupen.com/english/advisories/2011/0298 - http://www.redhat.com/support/errata/RHSA-2010-0958.html - http://www.mandriva.com/security/advisories?name=MDVSA-2011:051 - http://www.openwall.com/lists/oss-security/2010/10/07/1 - http://secunia.com/advisories/42963 - http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.37-rc1 - http://www.vupen.com/english/advisories/2011/0280 - http://www.vmware.com/s
x/kernel/v2.6/testing/ChangeLog-2.6.37-rc1 - http://www.vupen.com/english/advisories/2011/0280 - http://www.vmware.com/security/advisories/VMSA-2011-0012.html - http://secunia.com/advisories/42758 - http://secunia.com/advisories/42884 - http://www.vupen.com/english/advisories/2011/0375 - http://lkml.org/lkml/2010/10/6/454 - http://secunia.com/advisories/42890 - http://www.redhat.com/support/errata/RHSA-2011-0162.html - http://www.vupen.com/english/advisories/2011/0012 - http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00002.html - http://www.vupen.com/english/advisories/2011/0168 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:029 - http://www.openwall.com/lists/
/advisories/2011/0168 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:029 - http://www.openwall.com/lists/oss-security/2010/10/25/3 - http://www.ubuntu.com/usn/USN-1057-1 - http://secunia.com/advisories/43291 - http://www.vupen.com/english/advisories/2011/0070 - http://secunia.com/advisories/43161 - http://www.debian.org/security/2010/dsa-2126
CVE ID: CVE-2010-4073 State: PUBLISHED Published: 2010-11-29T15:00:00 Last Updated: 2024-08-07T03:34:37.199Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ipc subsystem in the Linux kernel before 2.6.37-rc1 does not initialize certain structures, which allows local users to obtain potentially sensitive information from kernel stack memory via vectors related to the (1) compat_sys_semctl, (2) compat_sys_msgctl, and (3) compat_sys_shmctl functions in ipc/compat.c; and the (4) compat_sys_mq_open and (5) compat_sys_mq_getsetattr functions in ipc/compat_mq.c. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/45073 - http://lists.ope
ditional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/45073 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00004.html - http://secunia.com/advisories/42778 - http://www.securityfocus.com/archive/1/520102/100/0/threaded - http://www.redhat.com/support/errata/RHSA-2011-0017.html - http://secunia.com/advisories/46397 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.html - http://secunia.com/advisories/42932 - https://bugzilla.redhat.com/show_bug.cgi?id=648658 - http://www.redhat.com/support/errata/RHSA-2011-0007.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=03145beb455cf5
ata/RHSA-2011-0007.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=03145beb455cf5c20a761e8451e30b8a74ba58d9 - http://www.vupen.com/english/advisories/2011/0124 - http://securityreason.com/securityalert/8366 - http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html - http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.html - http://www.vupen.com/english/advisories/2011/0298 - http://www.redhat.com/support/errata/RHSA-2010-0958.html - http://www.mandriva.com/security/advisories?name=MDVSA-2011:051 - http://www.openwall.com/lists/oss-security/2010/10/07/1 - http://secunia.com/advisories/42963 - http://www.kernel.org/pub
ttp://www.openwall.com/lists/oss-security/2010/10/07/1 - http://secunia.com/advisories/42963 - http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.37-rc1 - http://lkml.org/lkml/2010/10/6/492 - http://www.vmware.com/security/advisories/VMSA-2011-0012.html - http://secunia.com/advisories/42884 - http://www.vupen.com/english/advisories/2011/0375 - http://secunia.com/advisories/42890 - http://www.redhat.com/support/errata/RHSA-2011-0162.html - http://www.vupen.com/english/advisories/2011/0012 - http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00002.html - http://www.vupen.com/english/advisories/2011/0168 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:0
html - http://www.vupen.com/english/advisories/2011/0168 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:029 - http://www.openwall.com/lists/oss-security/2010/10/25/3 - http://secunia.com/advisories/43291 - http://www.debian.org/security/2010/dsa-2126
CVE ID: CVE-2010-4074 State: PUBLISHED Published: 2010-11-29T15:00:00 Last Updated: 2024-08-07T03:34:37.692Z Vendors: n/a Products: n/a Problem Types: n/a Description: The USB subsystem in the Linux kernel before 2.6.36-rc5 does not properly initialize certain structure members, which allows local users to obtain potentially sensitive information from kernel stack memory via vectors related to TIOCGICOUNT ioctl calls, and the (1) mos7720_ioctl function in drivers/usb/serial/mos7720.c and (2) mos7840_ioctl function in drivers/usb/serial/mos7840.c. Additional Analyst Notes: - CVE Program Container: References: - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a0
CVE Program Container: References: - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a0846f1868b11cd827bdfeaf4527d8b1b1c0b098 - http://www.openwall.com/lists/oss-security/2010/09/25/2 - http://www.kernel.org/pub/linux/kernel/v2.6/testing/v2.6.36/ChangeLog-2.6.36-rc5 - http://www.openwall.com/lists/oss-security/2010/10/06/6 - https://bugzilla.redhat.com/show_bug.cgi?id=648659 - http://www.redhat.com/support/errata/RHSA-2011-0007.html - http://lkml.org/lkml/2010/9/15/392 - http://www.redhat.com/support/errata/RHSA-2010-0958.html - http://www.openwall.com/lists/oss-security/2010/10/07/1 - http://www.securityfocus.com/bid/45074 - http://secunia.com/advisories/428
penwall.com/lists/oss-security/2010/10/07/1 - http://www.securityfocus.com/bid/45074 - http://secunia.com/advisories/42890 - http://www.openwall.com/lists/oss-security/2010/10/25/3 - http://www.debian.org/security/2010/dsa-2126
CVE ID: CVE-2010-4075 State: PUBLISHED Published: 2010-11-29T15:00:00 Last Updated: 2024-08-07T03:34:37.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: The uart_get_count function in drivers/serial/serial_core.c in the Linux kernel before 2.6.37-rc1 does not properly initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via a TIOCGICOUNT ioctl call. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2010/09/25/2 - http://www.securityfocus.com/archive/1/520102/100/0/threaded - http://www.redhat.com/support/errata/RHSA-2011-0017.html - http://s
.securityfocus.com/archive/1/520102/100/0/threaded - http://www.redhat.com/support/errata/RHSA-2011-0017.html - http://secunia.com/advisories/46397 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d281da7ff6f70efca0553c288bb883e8605b3862 - http://www.openwall.com/lists/oss-security/2010/10/06/6 - http://www.redhat.com/support/errata/RHSA-2011-0007.html - http://lkml.indiana.edu/hypermail//linux/kernel/1009.1/03388.html - http://www.redhat.com/support/errata/RHSA-2010-0958.html - http://www.openwall.com/lists/oss-security/2010/10/07/1 - http://secunia.com/advisories/42963 - http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.37-rc1 - http://www.v
//secunia.com/advisories/42963 - http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.37-rc1 - http://www.vmware.com/security/advisories/VMSA-2011-0012.html - http://secunia.com/advisories/42884 - http://secunia.com/advisories/42890 - http://www.redhat.com/support/errata/RHSA-2011-0162.html - https://bugzilla.redhat.com/show_bug.cgi?id=648660 - http://www.vupen.com/english/advisories/2011/0168 - http://www.openwall.com/lists/oss-security/2010/10/25/3 - http://www.securityfocus.com/bid/43806
CVE ID: CVE-2010-4076 State: PUBLISHED Published: 2010-11-29T15:00:00Z Last Updated: 2024-09-16T23:30:51.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: The rs_ioctl function in drivers/char/amiserial.c in the Linux kernel 2.6.36.1 and earlier does not properly initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via a TIOCGICOUNT ioctl call. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2010/09/25/2 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d281da7ff6f70efca0553c288bb883e8605b3862 - http://www.op
l.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d281da7ff6f70efca0553c288bb883e8605b3862 - http://www.openwall.com/lists/oss-security/2010/10/06/6 - http://lkml.org/lkml/2010/9/15/389 - https://bugzilla.redhat.com/show_bug.cgi?id=648661 - http://www.openwall.com/lists/oss-security/2010/10/07/1 - http://www.openwall.com/lists/oss-security/2010/10/25/3
CVE ID: CVE-2010-4077 State: PUBLISHED Published: 2010-11-29T15:00:00 Last Updated: 2024-08-07T03:34:36.928Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ntty_ioctl_tiocgicount function in drivers/char/nozomi.c in the Linux kernel 2.6.36.1 and earlier does not properly initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via a TIOCGICOUNT ioctl call. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2010/09/25/2 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d281da7ff6f70efca0553c288bb883e8605b3862 - htt
/git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d281da7ff6f70efca0553c288bb883e8605b3862 - http://www.openwall.com/lists/oss-security/2010/10/06/6 - http://www.securityfocus.com/bid/45059 - http://www.redhat.com/support/errata/RHSA-2011-0007.html - http://lkml.indiana.edu/hypermail//linux/kernel/1009.1/03387.html - http://www.redhat.com/support/errata/RHSA-2010-0958.html - http://securityreason.com/securityalert/8129 - http://www.openwall.com/lists/oss-security/2010/10/07/1 - http://secunia.com/advisories/42890 - http://www.openwall.com/lists/oss-security/2010/10/25/3 - https://bugzilla.redhat.com/show_bug.cgi?id=648663
CVE ID: CVE-2010-4078 State: PUBLISHED Published: 2010-11-29T15:00:00 Last Updated: 2024-08-07T03:34:36.874Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sisfb_ioctl function in drivers/video/sis/sis_main.c in the Linux kernel before 2.6.36-rc6 does not properly initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via an FBIOGET_VBLANK ioctl call. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2010/09/25/2 - http://secunia.com/advisories/42778 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=fd02db9de73
cunia.com/advisories/42778 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=fd02db9de73faebc51240619c7c7f99bee9f65c7 - http://www.securityfocus.com/bid/43810 - http://secunia.com/advisories/42801 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00001.html - http://www.openwall.com/lists/oss-security/2010/10/06/6 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.html - http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html - http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.html - http://www.vupen.com/english/advisories/2011/0298 - http://www.mandriva.com/security/advisories?name=MD
/msg00004.html - http://www.vupen.com/english/advisories/2011/0298 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:051 - http://www.openwall.com/lists/oss-security/2010/10/07/1 - https://bugzilla.redhat.com/show_bug.cgi?id=648665 - http://www.vupen.com/english/advisories/2011/0012 - http://www.openwall.com/lists/oss-security/2010/10/25/3 - http://www.kernel.org/pub/linux/kernel/v2.6/testing/v2.6.36/ChangeLog-2.6.36-rc6 - http://www.debian.org/security/2010/dsa-2126
CVE ID: CVE-2010-4079 State: PUBLISHED Published: 2010-11-29T15:00:00 Last Updated: 2024-08-07T03:34:37.188Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ivtvfb_ioctl function in drivers/media/video/ivtv/ivtvfb.c in the Linux kernel before 2.6.36-rc8 does not properly initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via an FBIOGET_VBLANK ioctl call. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2010/09/25/2 - http://www.securityfocus.com/bid/45062 - http://www.openwall.com/lists/oss-security/2010/10/06/6 - http://www.redhat.com/su
p://www.securityfocus.com/bid/45062 - http://www.openwall.com/lists/oss-security/2010/10/06/6 - http://www.redhat.com/support/errata/RHSA-2011-0007.html - http://www.kernel.org/pub/linux/kernel/v2.6/testing/v2.6.36/ChangeLog-2.6.36-rc8 - http://www.redhat.com/support/errata/RHSA-2010-0958.html - http://www.openwall.com/lists/oss-security/2010/10/07/1 - http://secunia.com/advisories/42890 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=405707985594169cfd0b1d97d29fcb4b4c6f2ac9 - http://www.openwall.com/lists/oss-security/2010/10/25/3 - https://bugzilla.redhat.com/show_bug.cgi?id=648666 - http://lkml.org/lkml/2010/9/15/393 - http://www.debian.org/security/2010/
//bugzilla.redhat.com/show_bug.cgi?id=648666 - http://lkml.org/lkml/2010/9/15/393 - http://www.debian.org/security/2010/dsa-2126
CVE ID: CVE-2010-4080 State: PUBLISHED Published: 2010-11-30T22:00:00 Last Updated: 2024-08-07T03:34:37.215Z Vendors: n/a Products: n/a Problem Types: n/a Description: The snd_hdsp_hwdep_ioctl function in sound/pci/rme9652/hdsp.c in the Linux kernel before 2.6.36-rc6 does not initialize a certain structure, which allows local users to obtain potentially sensitive information from kernel stack memory via an SNDRV_HDSP_IOCTL_GET_CONFIG_INFO ioctl call. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2010/09/25/2 - http://secunia.com/advisories/42778 - http://secunia.com/advisories/42801 - http://www.securityfocus.com/archive/1/520102/
tp://secunia.com/advisories/42778 - http://secunia.com/advisories/42801 - http://www.securityfocus.com/archive/1/520102/100/0/threaded - http://www.redhat.com/support/errata/RHSA-2011-0017.html - http://secunia.com/advisories/46397 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00001.html - http://www.openwall.com/lists/oss-security/2010/10/06/6 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.html - http://lkml.org/lkml/2010/9/25/41 - http://www.redhat.com/support/errata/RHSA-2011-0007.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e68d3b316ab7b02a074edc4f770e6a746390cb7d - http://lists.opensuse.org/opensuse-s
it/torvalds/linux-2.6.git%3Ba=commit%3Bh=e68d3b316ab7b02a074edc4f770e6a746390cb7d - http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html - http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.html - http://www.vupen.com/english/advisories/2011/0298 - http://www.redhat.com/support/errata/RHSA-2010-0958.html - http://www.openwall.com/lists/oss-security/2010/10/07/1 - http://secunia.com/advisories/42963 - http://www.securityfocus.com/bid/45058 - http://www.vmware.com/security/advisories/VMSA-2011-0012.html - http://secunia.com/advisories/42884 - http://secunia.com/advisories/42890 - http://www.redhat.com/support/errata/RHSA-2011-0162.html - http://www.vupe
42884 - http://secunia.com/advisories/42890 - http://www.redhat.com/support/errata/RHSA-2011-0162.html - http://www.vupen.com/english/advisories/2011/0012 - https://bugzilla.redhat.com/show_bug.cgi?id=648669 - http://www.vupen.com/english/advisories/2011/0168 - http://www.openwall.com/lists/oss-security/2010/10/25/3 - http://www.securityfocus.com/bid/45063 - http://www.kernel.org/pub/linux/kernel/v2.6/testing/v2.6.36/ChangeLog-2.6.36-rc6 - http://www.debian.org/security/2010/dsa-2126
CVE ID: CVE-2010-4081 State: PUBLISHED Published: 2010-11-30T22:00:00 Last Updated: 2024-08-07T03:34:37.224Z Vendors: n/a Products: n/a Problem Types: n/a Description: The snd_hdspm_hwdep_ioctl function in sound/pci/rme9652/hdspm.c in the Linux kernel before 2.6.36-rc6 does not initialize a certain structure, which allows local users to obtain potentially sensitive information from kernel stack memory via an SNDRV_HDSPM_IOCTL_GET_CONFIG_INFO ioctl call. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2010/09/25/2 - http://secunia.com/advisories/42778 - http://secunia.com/advisories/42801 - http://www.securityfocus.com/archive/1/5201
http://secunia.com/advisories/42778 - http://secunia.com/advisories/42801 - http://www.securityfocus.com/archive/1/520102/100/0/threaded - http://www.redhat.com/support/errata/RHSA-2011-0017.html - http://secunia.com/advisories/46397 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00001.html - http://www.openwall.com/lists/oss-security/2010/10/06/6 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.html - http://lkml.org/lkml/2010/9/25/41 - http://www.redhat.com/support/errata/RHSA-2011-0007.html - https://bugzilla.redhat.com/show_bug.cgi?id=648670 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e68d3b316ab7b02a074edc4
.cgi?id=648670 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e68d3b316ab7b02a074edc4f770e6a746390cb7d - http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html - http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.html - http://www.vupen.com/english/advisories/2011/0298 - http://www.openwall.com/lists/oss-security/2010/10/07/1 - http://www.vmware.com/security/advisories/VMSA-2011-0012.html - http://secunia.com/advisories/42884 - http://www.vupen.com/english/advisories/2011/0375 - http://secunia.com/advisories/42890 - http://www.vupen.com/english/advisories/2011/0012 - http://lists.opensuse.org/opensuse-security-announce
isories/42890 - http://www.vupen.com/english/advisories/2011/0012 - http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00002.html - http://www.openwall.com/lists/oss-security/2010/10/25/3 - http://www.securityfocus.com/bid/45063 - http://www.kernel.org/pub/linux/kernel/v2.6/testing/v2.6.36/ChangeLog-2.6.36-rc6 - http://secunia.com/advisories/43291 - http://www.debian.org/security/2010/dsa-2126
CVE ID: CVE-2010-4082 State: PUBLISHED Published: 2010-11-30T22:00:00 Last Updated: 2024-08-07T03:34:37.748Z Vendors: n/a Products: n/a Problem Types: n/a Description: The viafb_ioctl_get_viafb_info function in drivers/video/via/ioctl.c in the Linux kernel before 2.6.36-rc5 does not properly initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via a VIAFB_GET_INFO ioctl call. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2010/09/25/2 - http://www.kernel.org/pub/linux/kernel/v2.6/testing/v2.6.36/ChangeLog-2.6.36-rc5 - http://lists.opensuse.org/opensuse-
- http://www.kernel.org/pub/linux/kernel/v2.6/testing/v2.6.36/ChangeLog-2.6.36-rc5 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00004.html - http://secunia.com/advisories/42778 - http://secunia.com/advisories/42801 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00001.html - http://www.openwall.com/lists/oss-security/2010/10/06/6 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.html - http://secunia.com/advisories/42932 - http://www.redhat.com/support/errata/RHSA-2011-0007.html - http://www.vupen.com/english/advisories/2011/0124 - http://www.securityfocus.com/bid/43817 - http://lists.opensuse.org/opensuse-security-announce/2011-02
sories/2011/0124 - http://www.securityfocus.com/bid/43817 - http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b4aaa78f4c2f9cde2f335b14f4ca30b01f9651ca - http://www.vupen.com/english/advisories/2011/0298 - http://www.redhat.com/support/errata/RHSA-2010-0958.html - http://www.openwall.com/lists/oss-security/2010/10/07/1 - http://secunia.com/advisories/42890 - http://www.vupen.com/english/advisories/2011/0012 - http://lkml.indiana.edu/hypermail//linux/kernel/1009.1/03392.html - http://www.openwall.com/lists/oss-security/2010/10/25/3 - https://bugzilla.redhat.com/show_bug.cgi?id=648671
CVE ID: CVE-2010-4083 State: PUBLISHED Published: 2010-11-30T22:00:00 Last Updated: 2024-08-07T03:34:37.796Z Vendors: n/a Products: n/a Problem Types: n/a Description: The copy_semid_to_user function in ipc/sem.c in the Linux kernel before 2.6.36 does not initialize a certain structure, which allows local users to obtain potentially sensitive information from kernel stack memory via a (1) IPC_INFO, (2) SEM_INFO, (3) IPC_STAT, or (4) SEM_STAT command in a semctl system call. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/43809 - http://www.openwall.com/lists/oss-security/2010/09/25/2 - http://secunia.com/advisories/42789 - http://www.vupen.co