VDB
CVE-2010-4565
CVE-2010-4565
PUBLISHED
Reported by mitre · Published December 29, 2010
The bcm_connect function in net/can/bcm.c (aka the Broadcast Manager) in the Controller Area Network (CAN) implementation in the Linux kernel 2.6.36 and earlier creates a publicly accessible file with a filename containing a kernel memory address, which allows local users to obtain potentially sensitive information about kernel memory use by listing this filename.
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| linux | linux_kernel | |
| n/a | n/a | n/a, n/a, n/a |
Timeline
- Dec 29, 2010 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 21, 2022 EPSS Score
- Jul 13, 2022 EPSS Score
- Sep 5, 2022 EPSS Score
- Oct 29, 2022 EPSS Score
- Dec 21, 2022 EPSS Score
- Feb 12, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 6, 2023 EPSS Score
- May 29, 2023 EPSS Score
References
- [oss-security] 20101220 CVE request: kernel: CAN information leak, 2nd attempt mailing-listx_refsource_MLIST
- [netdev] 20101102 Re: [SECURITY] CAN info leak/minor heap overflow mailing-listx_refsource_MLIST
- [netdev] 20101109 Re: [PATCH] Fix CAN info leak/minor heap overflow mailing-listx_refsource_MLIST
- [oss-security] 20101220 Re: CVE request: kernel: CAN information leak, 2nd attempt mailing-listx_refsource_MLIST
- [oss-security] 20101104 Re: CVE request: kernel: CAN information leak mailing-listx_refsource_MLIST
- x_refsource_MISC
- [netdev] 20101110 Re: [PATCH] Fix CAN info leak/minor heap overflow mailing-listx_refsource_MLIST
- [netdev] 20101102 [SECURITY] CAN info leak/minor heap overflow mailing-listx_refsource_MLIST
- 44661 vdb-entryx_refsource_BID
- MDVSA-2011:029 vendor-advisoryx_refsource_MANDRIVA
- [oss-security] 20101103 CVE request: kernel: CAN information leak mailing-listx_refsource_MLIST