huzaifas-sidhpurwala/security-commit huggingface dataset:
CVE-2008-1949: GNUTLS-SA-2008-1-2 GnuTLS null-pointer dereference
Component: GNUTLS-SA-2008-1-2 GnuTLS null-pointer dereference
Severity: Important
CWE: CWE-476 (NULL Pointer Dereference)
Public date: 2008-05-19T00:00:00+00:00

The _gnutls_recv_client_kx_message function in lib/gnutls_kx.c in libgnutls in gnutls-serv in GnuTLS before 2.2.4 continues to process Client Hello messages within a TLS message after one has already been processed, which allows remote attackers to cause a denial of service (NULL dereference and crash) via a TLS message containing multiple Client Hello messages, aka GNUTLS-SA-2008-1-2.


Affected upstream versions: n/a
Upstream repository: https://git.savannah.gnu.org/gitweb/gnutls.git
Upstream fix commit: bc8102405fda11ea00ca3b42acc4f4bce9d6e97b
CVE-2008-1950: GNUTLS-SA-2008-1-3 GnuTLS memory overread flaw
Component: GNUTLS-SA-2008-1-3 GnuTLS memory overread flaw
Severity: Important
Public date: 2008-05-19T00:00:00+00:00

Integer signedness error in the _gnutls_ciphertext2compressed function in lib/gnutls_cipher.c in libgnutls in GnuTLS before 2.2.4 allows remote attackers to cause a denial of service (buffer over-read and crash) via a certain integer value in the Random field in an encrypted Client Hello message within a TLS record with an invalid Record Length, which leads to an invalid cipher padding length, aka GNUTLS-SA-2008-1-3.


Affected upstream versions: n/a
Upstream repository: https://git.savannah.gnu.org/gitweb/gnutls.git
Upstream fix commit: bc8102405fda11ea00ca3b42acc4f4bce9d6e97b
CVE-2008-2148: kernel: fix permission checking in sys_utimensat
Component: kernel
Severity: Important
Public date: 2008-04-08T00:00:00+00:00

The utimensat system call (sys_utimensat) in Linux kernel 2.6.22 and other versions before 2.6.25.3 does not check file permissions when certain UTIME_NOW and UTIME_OMIT combinations are used, which allows local users to modify file times of arbitrary files, possibly leading to a denial of service.


Affected upstream versions: n/a
Upstream repository: https://git.kernel.org/linux/kernel/git/stable/linux-2.6.25.y.git
Upstream fix commit: f9dfda1ad0637a89a64d001cf81478bd8d9b6306
CVE-2008-2365: kernel: ptrace: Crash on PTRACE_{ATTACH,DETACH} race
Component: kernel
Severity: Important
Public date: 2008-04-02T00:00:00+00:00

Race condition in the ptrace and utrace support in the Linux kernel 2.6.9 through 2.6.25, as used in Red Hat Enterprise Linux (RHEL) 4, allows local users to cause a denial of service (oops) via a long series of PTRACE_ATTACH ptrace calls to another user's process that trigger a conflict between utrace_detach and report_quiescent, related to "late ptrace_may_attach() check" and "race around &dead_engine_ops setting," a different vulnerability than CVE-2007-0771 and CVE-2008-1514.  NOTE: this issue might only affect kernel versions before 2.6.16.x.


Affected upstream versions: n/a
Fixed upstream versions: v2.6.17
Upstream repository: https://git.kernel.org/linux/kernel/git/stable/linux-2.6.25.y.git
Upstream fix commit: f5b40e363ad6041a96e3da32281d8faa191597b9
CVE-2008-2372: kernel: Reinstate ZERO_PAGE optimization in 'get_user_pages()' and fix XIP
Component: kernel
Severity: Low
Public date: 2008-06-21T00:00:00+00:00

The Linux kernel 2.6.24 and 2.6.25 before 2.6.25.9 allows local users to cause a denial of service (memory consumption) via a large number of calls to the get_user_pages function, which lacks a ZERO_PAGE optimization and results in allocation of "useless newly zeroed pages."


Affected upstream versions: n/a
Fixed upstream versions: v2.6.26
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 89f5b7da2a6bad2e84670422ab8192382a5aeb9f
CVE-2008-2729: kernel: [x86_64]  The string instruction version didn't zero the output on exception.
Component: kernel
Severity: Important
Public date: 2006-08-26T00:00:00+00:00

arch/x86_64/lib/copy_user.S in the Linux kernel before 2.6.19 on some AMD64 systems does not erase destination memory locations after an exception during kernel memory copy, which allows local users to obtain sensitive information.


Affected upstream versions: n/a
Fixed upstream versions: v2.6.19
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 3022d734a54cbd2b65eea9a024564821101b4a9a
CVE-2008-2812: kernel: NULL ptr dereference in multiple network drivers due to missing checks in tty code
Component: kernel
Severity: Moderate
Public date: 2008-04-30T00:00:00+00:00

The Linux kernel before 2.6.25.10 does not properly perform tty operations, which allows local users to cause a denial of service (system crash) or possibly gain privileges via vectors involving NULL pointer dereference of function pointers in (1) hamradio/6pack.c, (2) hamradio/mkiss.c, (3) irda/irtty-sir.c, (4) ppp_async.c, (5) ppp_synctty.c, (6) slip.c, (7) wan/x25_asy.c, and (8) wireless/strip.c in drivers/net/.


Affected upstream versions: n/a
Upstream repository: https://git.kernel.org/linux/kernel/git/stable/linux-2.6.25.y.git
Upstream fix commit: 2a739dd53ad7ee010ae6e155438507f329dce788
CVE-2008-2826: kernel: sctp: sctp_getsockopt_local_addrs_old() potential overflow
Component: kernel
Severity: Low
Public date: 2008-06-21T00:00:00+00:00

Integer overflow in the sctp_getsockopt_local_addrs_old function in net/sctp/socket.c in the Stream Control Transmission Protocol (sctp) functionality in the Linux kernel before 2.6.25.9 allows local users to cause a denial of service (resource consumption and system outage) via vectors involving a large addr_num field in an sctp_getaddrs_old data structure.


Affected upstream versions: n/a
Fixed upstream versions: v2.6.26
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 735ce972fbc8a65fb17788debd7bbe7b4383cc62
CVE-2008-2931: kernel: missing check before setting mount propagation
Component: kernel
Severity: Important
Public date: 2007-05-08T00:00:00+00:00

The do_change_type function in fs/namespace.c in the Linux kernel before 2.6.22 does not verify that the caller has the CAP_SYS_ADMIN capability, which allows local users to gain privileges or cause a denial of service by modifying the properties of a mountpoint.

Statement: This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, and Red Hat Enterprise MRG.

Affected upstream versions: n/a
Fixed upstream versions: v2.6.22
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: ee6f958291e2a768fd727e7a67badfff0b67711a
CVE-2008-3272: kernel snd_seq_oss_synth_make_info leak
Component: kernel snd_seq_oss_synth_make_info leak
Severity: Moderate
Public date: 2008-08-02T00:00:00+00:00

The snd_seq_oss_synth_make_info function in sound/core/seq/oss/seq_oss_synth.c in the sound subsystem in the Linux kernel before 2.6.27-rc2 does not verify that the device number is within the range defined by max_synthdev before returning certain data to the caller, which allows local users to obtain sensitive information.


Affected upstream versions: n/a
Fixed upstream versions: v2.6.27
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 82e68f7ffec3800425f2391c8c86277606860442
CVE-2008-3275: Linux kernel local filesystem DoS
Component: Linux kernel local filesystem DoS
Severity: Moderate
Public date: 2008-07-02T00:00:00+00:00

The (1) real_lookup and (2) __lookup_hash functions in fs/namei.c in the vfs implementation in the Linux kernel before 2.6.25.15 do not prevent creation of a child dentry for a deleted (aka S_DEAD) directory, which allows local users to cause a denial of service ("overflow" of the UBIFS orphan area) via a series of attempted file creations within deleted directories.


Affected upstream versions: n/a
Fixed upstream versions: v2.6.27
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: d70b67c8bc72ee23b55381bd6a884f4796692f77
CVE-2008-3276: Linux kernel dccp_setsockopt_change() integer overflow
Component: Linux kernel dccp_setsockopt_change() integer overflow
Severity: Low
CWE: CWE-190 (Integer Overflow or Wraparound)
Public date: 2008-08-13T00:00:00+00:00

Integer overflow in the dccp_setsockopt_change function in net/dccp/proto.c in the Datagram Congestion Control Protocol (DCCP) subsystem in the Linux kernel 2.6.17-rc1 through 2.6.26.2 allows remote attackers to cause a denial of service (panic) via a crafted integer value, related to Change L and Change R options without at least one byte in the dccpsf_val field.


Affected upstream versions: n/a
Fixed upstream versions: v2.6.27
Upstream repository: https://git.kernel.org/linux/kernel/git/stable/linux-2.6.26.y.git
Upstream fix commit: 3e8a0a559c66ee9e7468195691a56fefc3589740
CVE-2008-3525: kernel: missing capability checks in sbni_ioctl()
Component: kernel
Severity: Important
Public date: 2008-08-27T00:00:00+00:00

The sbni_ioctl function in drivers/net/wan/sbni.c in the wan subsystem in the Linux kernel 2.6.26.3 does not check for the CAP_NET_ADMIN capability before processing a (1) SIOCDEVRESINSTATS, (2) SIOCDEVSHWSTATE, (3) SIOCDEVENSLAVE, or (4) SIOCDEVEMANSIPATE ioctl request, which allows local users to bypass intended capability restrictions.


Affected upstream versions: n/a
Fixed upstream versions: v2.6.27
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: f2455eb176ac87081bbfc9a44b21c7cd2bc1967e
CVE-2008-3526: Linux kernel sctp_setsockopt_auth_key() integer overflow
Component: Linux kernel sctp_setsockopt_auth_key() integer overflow
Severity: Important
CWE: CWE-190 (Integer Overflow or Wraparound)
Public date: 2008-08-26T00:00:00+00:00

Integer overflow in the sctp_setsockopt_auth_key function in net/sctp/socket.c in the Stream Control Transmission Protocol (sctp) implementation in the Linux kernel 2.6.24-rc1 through 2.6.26.3 allows remote attackers to cause a denial of service (panic) or possibly have unspecified other impact via a crafted sca_keylength field associated with the SCTP_AUTH_KEY option.

Statement: This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, and 5.

Affected upstream versions: n/a
Fixed upstream versions: v2.6.27
Upstream repository: https://git.kernel.org/linux/kernel/git/stable/linux-2.6.26.y.git
Upstream fix commit: 30c2235cbc477d4629983d440cdc4f496fec9246
CVE-2008-3527: kernel: missing boundary checks in syscall/syscall32_nopage()
Component: kernel
Severity: Important
Public date: 2008-11-04T00:00:00+00:00

Tavis Ormandy reported missing boundary checks in the Virtual Dynamic Shared Objects (vDSO) implementation. This could allow a local unprivileged user to cause a denial of service or privilege escalation. (CVE-2008-3527, Important)

Statement: This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, and Red Hat Enterprise MRG.

Affected upstream versions: n/a
Fixed upstream versions: v2.6.21
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 7d91d531900bfa1165d445390b3b13a8013f98f7
CVE-2008-3534: kernel: tmpfs: fix kernel BUG in shmem_delete_inode
Component: kernel
Severity: Low
Public date: 2008-07-26T00:00:00+00:00

The shmem_delete_inode function in mm/shmem.c in the tmpfs implementation in the Linux kernel before 2.6.26.1 allows local users to cause a denial of service (system crash) via a certain sequence of file create, remove, and overwrite operations, as demonstrated by the insserv program, related to allocation of "useless pages" and improper maintenance of the i_blocks count.

Statement: This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, and 5.

Affected upstream versions: n/a
Fixed upstream versions: v2.6.27
Upstream repository: https://git.kernel.org/linux/kernel/git/stable/linux-2.6.26.y.git
Upstream fix commit: 14fcc23fdc78e9d32372553ccf21758a9bd56fa1
CVE-2008-3792: kernel: sctp: fix potential panics in the SCTP-AUTH API
Component: kernel
Severity: Important
Public date: 2008-08-21T00:00:00+00:00

net/sctp/socket.c in the Stream Control Transmission Protocol (sctp) implementation in the Linux kernel before 2.6.26.4 does not verify that the SCTP-AUTH extension is enabled before proceeding with SCTP-AUTH API functions, which allows attackers to cause a denial of service (NULL pointer dereference and panic) via vectors that result in calls to (1) sctp_setsockopt_auth_chunk, (2) sctp_setsockopt_hmac_ident, (3) sctp_setsockopt_auth_key, (4) sctp_setsockopt_active_key, (5) sctp_setsockopt_del_key, (6) sctp_getsockopt_maxburst, (7) sctp_getsockopt_active_key, (8) sctp_getsockopt_peer_auth_chunks, or (9) sctp_getsockopt_local_auth_chunks.

Statement: This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, and 5.

Affected upstream versions: n/a
Fixed upstream versions: v2.6.27
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 5e739d1752aca4e8f3e794d431503bfca3162df4
CVE-2008-3833: kernel: remove SUID when splicing into an inode
Component: kernel
Severity: Important
Public date: 2006-10-17T00:00:00+00:00

The generic_file_splice_write function in fs/splice.c in the Linux kernel before 2.6.19 does not properly strip setuid and setgid bits when there is a write to a file, which allows local users to gain the privileges of a different group, and obtain sensitive information or possibly have unspecified other impact, by splicing into an inode in order to create an executable file in a setgid directory, a different vulnerability than CVE-2008-4210.

Statement: This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, and Red Hat Enterprise MRG.

Affected upstream versions: n/a
Fixed upstream versions: v2.6.19
Upstream repository: https://git.kernel.org/linux/kernel/git/stable/linux-2.6.19.y.git
Upstream fix commit: 8c34e2d63231d4bf4852bac8521883944d770fe3
CVE-2008-3915: kernel: nfsd: fix buffer overrun decoding NFSv4 acl
Component: kernel
Severity: Moderate
Public date: 2008-09-01T00:00:00+00:00

Buffer overflow in nfsd in the Linux kernel before 2.6.26.4, when NFSv4 is enabled, allows remote attackers to have an unknown impact via vectors related to decoding an NFSv4 acl.

Statement: This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, and 5.

Affected upstream versions: n/a
Fixed upstream versions: v2.6.27
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 91b80969ba466ba4b915a4a1d03add8c297add3f
CVE-2008-4113: kernel: sctp_getsockopt_hmac_ident information disclosure
Component: kernel
Severity: Important
Public date: 2008-08-21T00:00:00+00:00

The sctp_getsockopt_hmac_ident function in net/sctp/socket.c in the Stream Control Transmission Protocol (sctp) implementation in the Linux kernel before 2.6.26.4, when the SCTP-AUTH extension is enabled, relies on an untrusted length value to limit copying of data from kernel memory, which allows local users to obtain sensitive information via a crafted SCTP_HMAC_IDENT IOCTL request involving the sctp_getsockopt function.

Statement: This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, and 5.

Affected upstream versions: n/a
Fixed upstream versions: v2.6.27
Upstream repository: https://git.kernel.org/linux/kernel/git/stable/linux-2.6.26.y.git
Upstream fix commit: d97240552cd98c4b07322f30f66fd9c3ba4171de
CVE-2008-4210: kernel: open() call allows setgid bit when user is not in new file's group
Component: kernel
Severity: Important
Public date: 2007-05-02T00:00:00+00:00

fs/open.c in the Linux kernel before 2.6.22 does not properly strip setuid and setgid bits when there is a write to a file, which allows local users to gain the privileges of a different group, and obtain sensitive information or possibly have unspecified other impact, by creating an executable file in a setgid directory through the (1) truncate or (2) ftruncate function in conjunction with memory-mapped I/O.


Affected upstream versions: n/a
Fixed upstream versions: v2.6.22
Upstream repository: https://git.kernel.org/linux/kernel/git/stable/linux-2.6.26.y.git
Upstream fix commit: 7b82dc0e64e93f430182f36b46b79fcee87d3532
CVE-2008-4302: kernel: splice: fix bad unlock_page() in error case
Component: kernel
Severity: Important
Public date: 2007-07-20T00:00:00+00:00

fs/splice.c in the splice subsystem in the Linux kernel before 2.6.22.2 does not properly handle a failure of the add_to_page_cache_lru function, and subsequently attempts to unlock a page that was not locked, which allows local users to cause a denial of service (kernel BUG and system crash), as demonstrated by the fio I/O tool.

Statement: This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, and Red Hat Enterprise MRG.

Affected upstream versions: n/a
Fixed upstream versions: v2.6.23
Upstream repository: https://git.kernel.org/linux/kernel/git/stable/linux-2.6.26.y.git
Upstream fix commit: 6a860c979b35469e4d77da781a96bdb2ca05ae64
CVE-2008-4307: Kernel BUG() in locks_remove_flock
Component: Kernel BUG() in locks_remove_flock
Severity: Important
Public date: 2008-10-30T00:00:00+00:00

Race condition in the do_setlk function in fs/nfs/file.c in the Linux kernel before 2.6.26 allows local users to cause a denial of service (crash) via vectors resulting in an interrupted RPC call that leads to a stray FL_POSIX lock, related to improper handling of a race between fcntl and close in the EINTR case.


Affected upstream versions: n/a
Fixed upstream versions: v2.6.26
Upstream repository: https://git.kernel.org/linux/kernel/git/stable/linux-2.6.27.y.git
Upstream fix commit: c4d7c402b788b73dc24f1e54a57f89d3dc5eb7bc
CVE-2008-4445: kernel: sctp: fix random memory dereference with SCTP_HMAC_IDENT option
Component: kernel
Severity: Moderate
Public date: 2008-08-27T00:00:00+00:00

The sctp_auth_ep_set_hmacs function in net/sctp/auth.c in the Stream Control Transmission Protocol (sctp) implementation in the Linux kernel before 2.6.26.4, when the SCTP-AUTH extension is enabled, does not verify that the identifier index is within the bounds established by SCTP_AUTH_HMAC_ID_MAX, which allows local users to obtain sensitive information via a crafted SCTP_HMAC_IDENT IOCTL request involving the sctp_getsockopt function, a different vulnerability than CVE-2008-4113.

Statement: This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, and 5.

Affected upstream versions: n/a
Fixed upstream versions: v2.6.27
Upstream repository: https://git.kernel.org/linux/kernel/git/stable/linux-2.6.26.y.git
Upstream fix commit: d97240552cd98c4b07322f30f66fd9c3ba4171de
CVE-2008-4554: kernel: don't allow splice() to files opened with O_APPEND
Component: kernel
Severity: Important
Public date: 2008-10-09T00:00:00+00:00

The do_splice_from function in fs/splice.c in the Linux kernel before 2.6.27 does not reject file descriptors that have the O_APPEND flag set, which allows local users to bypass append mode and make arbitrary changes to other locations in the file.


Affected upstream versions: n/a
Fixed upstream versions: v2.6.27
Upstream repository: https://git.kernel.org/linux/kernel/git/stable/linux-2.6.26.y.git
Upstream fix commit: efc968d450e013049a662d22727cf132618dcb2f
CVE-2008-4618: kernel: sctp: Fix kernel panic while process protocol violation parameter
Component: kernel
Severity: Important
Public date: 2008-09-30T00:00:00+00:00

The Stream Control Transmission Protocol (sctp) implementation in the Linux kernel before 2.6.27 does not properly handle a protocol violation in which a parameter has an invalid length, which allows attackers to cause a denial of service (panic) via unspecified vectors, related to sctp_sf_violation_paramlen, sctp_sf_abort_violation, sctp_make_abort_violation, and incorrect data types in function calls.

Statement: The versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, and 5 were not affected by this issue.

Affected upstream versions: n/a
Fixed upstream versions: v2.6.27
Upstream repository: https://git.kernel.org/linux/kernel/git/stable/linux-2.6.27.y.git
Upstream fix commit: ba0166708ef4da7eeb61dd92bbba4d5a749d6561
CVE-2008-4933: kernel: hfsplus: fix Buffer overflow with a corrupted image
Component: kernel
Severity: Low
Public date: 2008-10-15T00:00:00+00:00

Buffer overflow in the hfsplus_find_cat function in fs/hfsplus/catalog.c in the Linux kernel before 2.6.28-rc1 allows attackers to cause a denial of service (memory corruption or system crash) via an hfsplus filesystem image with an invalid catalog namelength field, related to the hfsplus_cat_build_key_uni function.


Affected upstream versions: n/a
Fixed upstream versions: v2.6.28
Upstream repository: https://git.kernel.org/linux/kernel/git/stable/linux-2.6.27.y.git
Upstream fix commit: efc7ffcb4237f8cb9938909041c4ed38f6e1bf40
CVE-2008-4934: kernel: hfsplus: check read_mapping_page() return value
Component: kernel
Severity: Low
Public date: 2008-10-15T00:00:00+00:00

The hfsplus_block_allocate function in fs/hfsplus/bitmap.c in the Linux kernel before 2.6.28-rc1 does not check a certain return value from the read_mapping_page function before calling kmap, which allows attackers to cause a denial of service (system crash) via a crafted hfsplus filesystem image.


Affected upstream versions: n/a
Fixed upstream versions: v2.6.28
Upstream repository: https://git.kernel.org/linux/kernel/git/stable/linux-2.6.27.y.git
Upstream fix commit: 649f1ee6c705aab644035a7998d7b574193a598a
CVE-2008-5025: kernel: hfs: fix namelength memory corruption
Component: kernel
Severity: Low
Public date: 2008-10-15T00:00:00+00:00

Stack-based buffer overflow in the hfs_cat_find_brec function in fs/hfs/catalog.c in the Linux kernel before 2.6.28-rc1 allows attackers to cause a denial of service (memory corruption or system crash) via an hfs filesystem image with an invalid catalog namelength field, a related issue to CVE-2008-4933.


Affected upstream versions: n/a
Fixed upstream versions: v2.6.28
Upstream repository: https://git.kernel.org/linux/kernel/git/stable/linux-2.6.27.y.git
Upstream fix commit: d38b7aa7fc3371b52d036748028db50b585ade2e
CVE-2008-5134: kernel: libertas: fix buffer overrun
Component: kernel
Severity: Important
Public date: 2008-10-29T00:00:00+00:00

Buffer overflow in the lbs_process_bss function in drivers/net/wireless/libertas/scan.c in the libertas subsystem in the Linux kernel before 2.6.27.5 allows remote attackers to have an unknown impact via an "invalid beacon/probe response."

Statement: This issue did not affect the versions of the Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, or 5.

Affected upstream versions: n/a
Fixed upstream versions: v2.6.28
Upstream repository: https://git.kernel.org/linux/kernel/git/stable/linux-2.6.27.y.git
Upstream fix commit: 48735d8d8bd701b1e0cd3d49c21e5e385ddcb077
CVE-2008-5188: ecryptfs-utils: potential provided password disclosure in the process table
Component: ecryptfs-utils
Severity: Low
Public date: 2008-10-23T00:00:00+00:00

The (1) ecryptfs-setup-private, (2) ecryptfs-setup-confidential, and (3) ecryptfs-setup-pam-wrapped.sh scripts in ecryptfs-utils 45 through 61 in eCryptfs place cleartext passwords on command lines, which allows local users to obtain sensitive information by listing the process.


Affected upstream versions: n/a
Upstream repository: https://git.kernel.org/linux/kernel/git/mhalcrow/ecryptfs-utils.git
Upstream fix commit: 06de99afd53f03fe07eda0ad9d61ac6d5d4d9f53