[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Message-ID: <4C85AF1B.1020308@redhat.com>
Date: Tue, 07 Sep 2010 11:18:51 +0800
From: Eugene Teo <eugene@...hat.com>
To: oss-security@...ts.openwall.com
CC: "Steven M. Christey" <coley@...us.mitre.org>
Subject: CVE request: kernel: xfs: XFS_IOC_FSGETXATTR ioctl memory leak
From Dan Rosenberg, "the XFS_IOC_FSGETXATTR ioctl allows unprivileged
users to read 12 bytes of uninitialized stack memory, because the
fsxattr struct declared on the stack in xfs_ioc_fsgetxattr() does not
alter (or zero) the 12-byte fsx_pad member before copying it back to the
user."
http://www.linux.sgi.com/archives/xfs-masters/2010-09/msg00002.html
https://bugzilla.redhat.com/show_bug.cgi?id=630804
Thanks, Eugene
--
main(i) { putchar(182623909 >> (i-1) * 5&31|!!(i<7)<<6) && main(++i); }
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
