[<prev] [next>] [day] [month] [year] [list]
Date: Wed, 08 Sep 2010 16:51:08 +0800
From: Eugene Teo <eugene@...hat.com>
To: oss-security@...ts.openwall.com
CC: "Steven M. Christey" <coley@...us.mitre.org>
Subject: CVE-2010-3080 kernel: /dev/sequencer open failure is not handled
correctly
Reported by Tavis Ormandy. There's a bug in snd_seq_oss_open from
sound/core/seq/oss/seq_oss_init.c that can result in dereferencing of a
released pointer. On some distros like Red Hat Enterprise Linux 5,
/dev/sequencer is restricted to root owner only. On others like Fedora
13, it cannot be accessed by a local, unprivileged user unless someone
logs in from the console on his/her behalf.
https://bugzilla.redhat.com/CVE-2010-3080
http://git.kernel.org/?p=linux/kernel/git/tiwai/sound-2.6.git;a=commitdiff;h=c598337660c21c0afaa9df5a65bb4a7a0cf15be8
Thanks, Eugene
--
main(i) { putchar(182623909 >> (i-1) * 5&31|!!(i<7)<<6) && main(++i); }
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
