oss-sec mailing list archives

CVE request kernel: tcf_fill_node() infoleak due to typo in 9ef1d4c7

From: Eugene Teo <eugene () redhat com>
Date: Wed, 14 Oct 2009 14:25:39 +0800

Eugene Teo wrote:

[...]
  CVE-2005-4881 - tc_fill_qdisc()  (at least)
This requires http://patchwork.ozlabs.org/patch/35412/ too. There was atypo in the upstream commit 9ef1d4c7.

I'm not sure but perhaps this needs a new CVE name. This infoleak bugwas introduced in 2005, but was discovered and fixed recently.


Eugene
--
Eugene Teo / Red Hat Security Response Team

Current thread:

Re: CVE request: kernel: tc: uninitialised kernel memory leak Eugene Teo (Oct 13)
- CVE request kernel: tcf_fill_node() infoleak due to typo in 9ef1d4c7 Eugene Teo (Oct 13)
  - Re: CVE request kernel: tcf_fill_node() infoleak due to typo in 9ef1d4c7 Josh Bressers (Oct 14)
  - Re: CVE request kernel: tcf_fill_node() infoleak due to typo in 9ef1d4c7 Eugene Teo (Oct 14)
    - Re: CVE request kernel: tcf_fill_node() infoleak due to typo in 9ef1d4c7 Willy Tarreau (Oct 14)