CVE-2011-0710
Advisory lineage Upstream: 0 Downstream: 3
Downstream
Modified
Published: 18 Feb 2011, 19:00
Last modified:06 Aug 2024, 21:58
Vulnerability Summary
Overall Risk (default)
minimal
8/100 CVSS Score
2.1 LOW
v2.0 (nvd)
EPSS Score
0.11% LOW
0% probability 0.00%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected
Timeline
18 Feb 2011, 19:00
Published
Vulnerability first disclosed
06 Aug 2024, 21:58
Last Modified
Vulnerability information updated
Description
The task_show_regs function in arch/s390/kernel/traps.c in the Linux kernel before 2.6.38-rc4-next-20110216 on the s390 platform allows local users to obtain the values of the registers of an arbitrary process by reading a status file under /proc/.
CVSS Metrics
- v2.0•LOW•Score: 2.1AV:L/AC:L/Au:N/C:P/I:N/A:N
EPSS Trends
Current EPSS score: 0.11%• Percentile: 29%
Techniques & Countermeasures
- CWE-200•Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
Affected Systems
- linux•linux_kernel
< 2.6.38 | 2.6.38 | 2.6.38:rc1 | 2.6.38:rc2 | 2.6.38:rc3
References (10)
- http://www.securityfocus.com/archive/1/520102/100/0/threaded
- http://secunia.com/advisories/46397
- http://www.kernel.org/pub/linux/kernel/v2.6/next/patch-v2.6.38-rc4-next-20110216.bz2
- https://bugzilla.redhat.com/show_bug.cgi?id=677850
- http://www.vmware.com/security/advisories/VMSA-2011-0012.html
- http://openwall.com/lists/oss-security/2011/02/16/3
- http://openwall.com/lists/oss-security/2011/02/16/9
- http://www.securityfocus.com/bid/46421
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=261cd298a8c363d7985e3482946edb4bfedacf98
- https://exchange.xforce.ibmcloud.com/vulnerabilities/65464