SB2011072904 - Information exposure in Linux kernel
Published: July 29, 2011
Security Bulletin ID
SB2011072904
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Information disclosure
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Information exposure (CVE-ID: CVE-2011-2492)
The vulnerability allows a local user to gain access to sensitive information.
The vulnerability exists due to information exposure error. A local user can gain access to sensitive information.
Remediation
Install update from vendor's website.
References
- http://www.openwall.com/lists/oss-security/2011/06/24/2
- http://permalink.gmane.org/gmane.linux.bluez.kernel/12909
- http://securitytracker.com/id?1025778
- http://www.openwall.com/lists/oss-security/2011/06/24/3
- http://www.kernel.org/pub/linux/kernel/v3.0/testing/ChangeLog-3.0-rc4
- https://bugzilla.redhat.com/show_bug.cgi?id=703019
- http://rhn.redhat.com/errata/RHSA-2011-0927.html
- http://marc.info/?l=bugtraq&m=139447903326211&w=2
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8d03e971cf403305217b8e62db3a2e5ad2d6263f