Attacker Value

Unknown

(0 users assessed)

Exploitability

Unknown

(0 users assessed)

User Interaction

Unknown

Privileges Required

Unknown

Attack Vector

Unknown

0

CVE-2005-4881

Disclosure Date: October 19, 2009 •

Description

The netlink subsystem in the Linux kernel 2.4.x before 2.4.37.6 and 2.6.x before 2.6.13-rc1 does not initialize certain padding fields in structures, which might allow local users to obtain sensitive information from kernel memory via unspecified vectors, related to the (1) tc_fill_qdisc, (2) tcf_fill_node, (3) neightbl_fill_info, (4) neightbl_fill_param_info, (5) neigh_fill_info, (6) rtnetlink_fill_ifinfo, (7) rtnetlink_fill_iwinfo, (8) vif_delete, (9) ipmr_destroy_unres, (10) ipmr_cache_alloc_unres, (11) ipmr_cache_resolve, (12) inet6_fill_ifinfo, (13) tca_get_fill, (14) tca_action_flush, (15) tcf_add_notify, (16) tc_dump_action, (17) cbq_dump_police, (18) __nlmsg_put, (19) __rta_fill, (20) __rta_reserve, (21) inet6_fill_prefix, (22) rsvp_dump, and (23) cbq_dump_ovl functions.

Add Assessment

No one has assessed this topic. Be the first to add your voice to the community.

CVSS V3 Severity and Metrics

Data provided by the National Vulnerability Database (NVD)

Base Score:

None

Impact Score:

Unknown

Exploitability Score:

Unknown

Vector:

Attack Vector (AV):

Unknown

Attack Complexity (AC):

Unknown

Privileges Required (PR):

Unknown

User Interaction (UI):

Unknown

Scope (S):

Unknown

Confidentiality (C):

Unknown

Integrity (I):

Unknown

Availability (A):

Unknown

Vendors

linux

Products

References

Canonical

CVE-2005-4881 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4881)

Advisory

[oss-security] 20090917 Re: CVE request: kernel: tc: uninitialised kernel memory leak (http://www.openwall.com/lists/oss-security/2009/09/17/9)

[oss-security] 20090916 Re: CVE request: kernel: tc: uninitialised kernel memory leak (http://www.openwall.com/lists/oss-security/2009/09/17/1)

http://git.kernel.org?p=linux/kernel/git/stable/linux-2.4.37.y.git;a=commit;h=30e744716c4a6cc4e8ecaaddf68f20057c03dc8d

http://git.kernel.org?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=9ef1d4c7c7aca1cd436612b6ca785b726ffb8ed8

SECUNIA-37084 (http://secunia.com/advisories/37084)

http://www.kernel.org/pub/linux/kernel/v2.6/testing/v2.6.13/ChangeLog-2.6.13-rc1

http://www.redhat.com/support/errata/RHSA-2009-1522.html

SECUNIA-37909 (http://secunia.com/advisories/37909)

http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.37.6

http://git.kernel.org?p=linux/kernel/git/stable/linux-2.4.37.y.git;a=commit;h=3408cce0c2f380884070896420ca566704452fb5

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11744

https://bugzilla.redhat.com/show_bug.cgi?id=521601

http://git.kernel.org?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=8a47077a0b5aa2649751c46e7a27884e6686ccbf

http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.html

[bk-commits-head] 20050629 [NETLINK]: Missing initializations in dumped data (http://marc.info?l=git-commits-head&m=112002138324380)

[oss-security] 20090906 Re: CVE request: kernel: tc: uninitialised kernel memory leak (http://www.openwall.com/lists/oss-security/2009/09/06/2)

[oss-security] 20090907 Re: CVE request: kernel: tc: uninitialised kernel memory leak (http://www.openwall.com/lists/oss-security/2009/09/07/2)

[oss-security] 20090905 Re: CVE request: kernel: tc: uninitialised kernel memory leak (http://www.openwall.com/lists/oss-security/2009/09/05/2)

http://git.kernel.org?p=linux/kernel/git/stable/linux-2.4.37.y.git;a=commit;h=0f3f2328f63c521fe4b435f148687452f98b2349

http://git.kernel.org?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=b3563c4fbff906991a1b4ef4609f99cca2a0de6a

Rapid7

Technical Analysis