CVE-2008-2729

arch/x86_64/lib/copy_user.S in the Linux kernel before 2.6.19 on some AMD64 systems does not erase destination memory locations after an exception during kernel memory copy, which allows local users to obtain sensitive information.

CVSS v2.0 4.9 MEDIUM

4.9^/10

CVSS v2.0 : MEDIUM

Vector : AV:L/AC:L/Au:N/C:C/I:N/A:N

Exploitability : 3.9 / Impact : 6.9

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=3022d734a54cbd2b65eea9a024564821101b4a9a;hp=f0f4c3432e5e1087b3a8c0e6bd4113d3c37497ff	Exploit Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=451271	Issue Tracking Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2008-0508.html	Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2008-0519.html	Broken Link
http://www.securitytracker.com/id?1020364	Third Party Advisory VDB Entry
http://secunia.com/advisories/30849	Broken Link
http://www.securityfocus.com/bid/29943	Third Party Advisory VDB Entry
http://secunia.com/advisories/31107	Broken Link
http://www.mandriva.com/security/advisories?name=MDVSA-2008:174	Broken Link
http://secunia.com/advisories/30850	Broken Link
http://www.ubuntu.com/usn/usn-625-1	Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2008-0585.html	Broken Link
http://secunia.com/advisories/31628	Broken Link
http://www.debian.org/security/2008/dsa-1630	Third Party Advisory
http://secunia.com/advisories/31551	Broken Link
https://exchange.xforce.ibmcloud.com/vulnerabilities/43558	Third Party Advisory VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11571	Tool Signature

Advertisement

Configurations

Configuration 1 (hide)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Information

Published : 2008-06-30 15:41

Updated : 2022-02-03 11:57

NVD link : CVE-2008-2729

Mitre link : CVE-2008-2729

JSON object : View

CWE

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

Advertisement

Products Affected

linux

linux_kernel

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=3022d734a54cbd2b65eea9a024564821101b4a9a;hp=f0f4c3432e5e1087b3a8c0e6bd4113d3c37497ff", "name": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=3022d734a54cbd2b65eea9a024564821101b4a9a;hp=f0f4c3432e5e1087b3a8c0e6bd4113d3c37497ff", "tags": ["Exploit", "Vendor Advisory"], "refsource": "CONFIRM"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=451271", "name": "https://bugzilla.redhat.com/show_bug.cgi?id=451271", "tags": ["Issue Tracking", "Third Party Advisory"], "refsource": "CONFIRM"}, {"url": "http://rhn.redhat.com/errata/RHSA-2008-0508.html", "name": "RHSA-2008:0508", "tags": ["Third Party Advisory"], "refsource": "REDHAT"}, {"url": "http://www.redhat.com/support/errata/RHSA-2008-0519.html", "name": "RHSA-2008:0519", "tags": ["Broken Link"], "refsource": "REDHAT"}, {"url": "http://www.securitytracker.com/id?1020364", "name": "1020364", "tags": ["Third Party Advisory", "VDB Entry"], "refsource": "SECTRACK"}, {"url": "http://secunia.com/advisories/30849", "name": "30849", "tags": ["Broken Link"], "refsource": "SECUNIA"}, {"url": "http://www.securityfocus.com/bid/29943", "name": "29943", "tags": ["Third Party Advisory", "VDB Entry"], "refsource": "BID"}, {"url": "http://secunia.com/advisories/31107", "name": "31107", "tags": ["Broken Link"], "refsource": "SECUNIA"}, {"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:174", "name": "MDVSA-2008:174", "tags": ["Broken Link"], "refsource": "MANDRIVA"}, {"url": "http://secunia.com/advisories/30850", "name": "30850", "tags": ["Broken Link"], "refsource": "SECUNIA"}, {"url": "http://www.ubuntu.com/usn/usn-625-1", "name": "USN-625-1", "tags": ["Third Party Advisory"], "refsource": "UBUNTU"}, {"url": "http://www.redhat.com/support/errata/RHSA-2008-0585.html", "name": "RHSA-2008:0585", "tags": ["Broken Link"], "refsource": "REDHAT"}, {"url": "http://secunia.com/advisories/31628", "name": "31628", "tags": ["Broken Link"], "refsource": "SECUNIA"}, {"url": "http://www.debian.org/security/2008/dsa-1630", "name": "DSA-1630", "tags": ["Third Party Advisory"], "refsource": "DEBIAN"}, {"url": "http://secunia.com/advisories/31551", "name": "31551", "tags": ["Broken Link"], "refsource": "SECUNIA"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/43558", "name": "linux-kernel-destination-info-disclosure(43558)", "tags": ["Third Party Advisory", "VDB Entry"], "refsource": "XF"}, {"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11571", "name": "oval:org.mitre.oval:def:11571", "tags": ["Tool Signature"], "refsource": "OVAL"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "arch/x86_64/lib/copy_user.S in the Linux kernel before 2.6.19 on some AMD64 systems does not erase destination memory locations after an exception during kernel memory copy, which allows local users to obtain sensitive information."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-200"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2008-2729", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 4.9, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:C/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "COMPLETE"}, "severity": "MEDIUM", "impactScore": 6.9, "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}}, "publishedDate": "2008-06-30T22:41Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndExcluding": "2.6.19"}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2022-02-03T19:57Z"}