Secunia Logo
 
CVE Reference: CVE-2008-2729
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE:
CVE-2008-2729

Description:
arch/x86_64/lib/copy_user.S in the Linux kernel before 2.6.19 on some AMD64 systems does not erase destination memory locations after an exception during kernel memory copy, which allows local users to obtain sensitive information.

CVE Status:
Candidate

References:

XF
  http://xforce.iss.net/xforce/xfdb/43558

UBUNTU
  http://www.ubuntu.com/usn/usn-625-1

ST
  1020364

SAID
  Secunia Advisory: SA30849
  Secunia Advisory: SA30850
  Secunia Advisory: SA31107
  Secunia Advisory: SA31628
  Secunia Advisory: SA31551

REDHAT
  http://www.redhat.com/support/errata/RHSA-2008-0585.html
  http://rhn.redhat.com/errata/RHSA-2008-0508.html
  http://www.redhat.com/support/errata/RHSA-2008-0519.html

MANDRIVA
  http://www.mandriva.com/security/advisories?name=MDVSA-2008:174

DEBIAN
  http://www.debian.org/security/2008/dsa-1630

CONFIRM
  http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=3022d734a54cbd2b65eea9a024564821101b4a9a;hp=f0f4c3432e5e1087b3a8c0e6bd4113d3c37497ff

BID
  29943


Return to the previous page.