CVE-2010-0003

Published: Jan 26, 2010Modified: Apr 29, 2026

5.4

Vector

AV:L/AC:M/Au:N/C:P/I:N/A:C

Exploitability: 3.4 / Impact: 7.8

Source: NVD

Description

The print_fatal_signal function in kernel/signal.c in the Linux kernel before 2.6.32.4 on the i386 platform, when print-fatal-signals is enabled, allows local users to discover the contents of arbitrary memory locations by jumping to an address and then reading a log file, and might allow local users to cause a denial of service (system slowdown or crash) by jumping to an address.

Affected (3)

Products: Linux: Linux Kernel · Debian: Debian Linux

1 product

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Before 2.6.32.4

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 4.0
Debian Debian Linux	Version 5.0

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (48)

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b45c6e76bc2c72f6426c14bed64fdcbc9bf37cb0

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2010-January/034250.html

Source: secalert@redhat.com

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00002.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00000.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://patchwork.kernel.org/patch/69752/

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/38333

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/38492

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/38779

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/39033

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/43315

Source: secalert@redhat.com

Third Party Advisory

http://www.debian.org/security/2010/dsa-1996

Source: secalert@redhat.com

Third Party Advisory

http://www.debian.org/security/2010/dsa-2005

Source: secalert@redhat.com

Third Party Advisory

http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.32.4

Source: secalert@redhat.com

Vendor Advisory

http://www.openwall.com/lists/oss-security/2010/01/12/1

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2010/01/13/4

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://www.redhat.com/support/errata/RHSA-2010-0147.html

Source: secalert@redhat.com

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2010-0161.html

Source: secalert@redhat.com

Third Party Advisory

http://www.securityfocus.com/archive/1/516397/100/0/threaded

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.securityfocus.com/bid/37724

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.vmware.com/security/advisories/VMSA-2011-0003.html

Source: secalert@redhat.com

Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=554578

Source: secalert@redhat.com

Issue TrackingThird Party Advisory

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10550

Source: secalert@redhat.com

Third Party Advisory

https://rhn.redhat.com/errata/RHSA-2010-0146.html

Source: secalert@redhat.com

Third Party Advisory

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b45c6e76bc2c72f6426c14bed64fdcbc9bf37cb0