Linux Kernel 'net/' Subsystem Socket Filter CVE-2010-4161 Local Information Disclosure Vulnerability
BID:45064
Info
Linux Kernel 'net/' Subsystem Socket Filter CVE-2010-4161 Local Information Disclosure Vulnerability
| Bugtraq ID: | 45064 |
| Class: | Design Error |
| CVE: |
CVE-2010-4161 |
| Remote: | No |
| Local: | Yes |
| Published: | Sep 22 2010 12:00AM |
| Updated: | Mar 19 2015 08:29AM |
| Credit: | Dmitry Mishin |
| Vulnerable: |
VMWare ESX 4.1 VMWare ESX 4.0 Red Hat Enterprise Linux Desktop 5 client Red Hat Enterprise Linux 5 Server OpenVZ Project OpenVZ 028stab081.1 Linux kernel 2.6.18 rc7 Linux kernel 2.6.18 rc6 Linux kernel 2.6.18 rc5 Linux kernel 2.6.18 rc4 Linux kernel 2.6.18 rc3 Linux kernel 2.6.18 rc2 Linux kernel 2.6.18 rc1 Linux kernel 2.6.18 .8 Linux kernel 2.6.18 .7 Linux kernel 2.6.18 .6 Linux kernel 2.6.18 .5 Linux kernel 2.6.18 .4 Linux kernel 2.6.18 .3 Linux kernel 2.6.18 .2 Linux kernel 2.6.18 .1 Linux kernel 2.6.17 rc6 Linux kernel 2.6.17 rc4 Linux kernel 2.6.17 rc3 Linux kernel 2.6.17 rc2 Linux kernel 2.6.17 rc1 Linux kernel 2.6.17 .9 Linux kernel 2.6.17 .8 Linux kernel 2.6.17 .8 Linux kernel 2.6.17 .7 Linux kernel 2.6.17 .6 Linux kernel 2.6.17 .5 Linux kernel 2.6.17 .4 Linux kernel 2.6.17 .3 Linux kernel 2.6.17 .2 Linux kernel 2.6.17 .14 Linux kernel 2.6.17 .13 Linux kernel 2.6.17 .12 Linux kernel 2.6.17 .11 Linux kernel 2.6.17 .10 Linux kernel 2.6.17 .1 Linux kernel 2.6.17 -rc5 Linux kernel 2.6.17 Linux kernel 2.6.17 Linux kernel 2.6.16 rc6 Linux kernel 2.6.16 rc5 Linux kernel 2.6.16 rc4 Linux kernel 2.6.16 rc3 Linux kernel 2.6.16 rc2 Linux kernel 2.6.16 27 Linux kernel 2.6.16 13 Linux kernel 2.6.16 .9 Linux kernel 2.6.16 .8 Linux kernel 2.6.16 .7 Linux kernel 2.6.16 .6 Linux kernel 2.6.16 .53 Linux kernel 2.6.16 .52 Linux kernel 2.6.16 .51 Linux kernel 2.6.16 .50 Linux kernel 2.6.16 .5 Linux kernel 2.6.16 .49 Linux kernel 2.6.16 .48 Linux kernel 2.6.16 .47 Linux kernel 2.6.16 .46 Linux kernel 2.6.16 .45 Linux kernel 2.6.16 .44 Linux kernel 2.6.16 .43 Linux kernel 2.6.16 .41 Linux kernel 2.6.16 .40 Linux kernel 2.6.16 .4 Linux kernel 2.6.16 .39 Linux kernel 2.6.16 .38 Linux kernel 2.6.16 .37 Linux kernel 2.6.16 .36 Linux kernel 2.6.16 .35 Linux kernel 2.6.16 .34 Linux kernel 2.6.16 .33 Linux kernel 2.6.16 .32 Linux kernel 2.6.16 .31 Linux kernel 2.6.16 .30 Linux kernel 2.6.16 .3 Linux kernel 2.6.16 .29 Linux kernel 2.6.16 .28 Linux kernel 2.6.16 .27 Linux kernel 2.6.16 .26 Linux kernel 2.6.16 .25 Linux kernel 2.6.16 .24 Linux kernel 2.6.16 .23 Linux kernel 2.6.16 .23 Linux kernel 2.6.16 .22 Linux kernel 2.6.16 .21 Linux kernel 2.6.16 .20 Linux kernel 2.6.16 .2 Linux kernel 2.6.16 .19 Linux kernel 2.6.16 .18 Linux kernel 2.6.16 .17 Linux kernel 2.6.16 .16 Linux kernel 2.6.16 .15 Linux kernel 2.6.16 .14 Linux kernel 2.6.16 .12 Linux kernel 2.6.16 .11 Linux kernel 2.6.16 .10 Linux kernel 2.6.16 .1 Linux kernel 2.6.16 -rc1 Linux kernel 2.6.16 Linux kernel 2.6.16 Linux kernel 2.6.15 rc7 Linux kernel 2.6.15 .7 Linux kernel 2.6.15 .6 Linux kernel 2.6.15 .4 Linux kernel 2.6.15 .3 Linux kernel 2.6.15 .2 Linux kernel 2.6.15 .1 Linux kernel 2.6.15 -rc6 Linux kernel 2.6.15 -rc5 Linux kernel 2.6.15 -rc4 Linux kernel 2.6.15 -rc3 Linux kernel 2.6.15 -rc2 Linux kernel 2.6.15 -rc1 Linux kernel 2.6.15 Linux kernel 2.6.15 Linux kernel 2.6.14 .7 Linux kernel 2.6.14 .6 Linux kernel 2.6.14 .5 Linux kernel 2.6.14 .4 Linux kernel 2.6.14 .3 Linux kernel 2.6.14 .2 Linux kernel 2.6.14 .1 Linux kernel 2.6.14 -rc5 Linux kernel 2.6.14 -rc4 Linux kernel 2.6.14 -rc3 Linux kernel 2.6.14 -rc2 Linux kernel 2.6.14 -rc1 Linux kernel 2.6.14 Linux kernel 2.6.14 Linux kernel 2.6.13 rc5 Linux kernel 2.6.13 rc3 Linux kernel 2.6.13 rc2 Linux kernel 2.6.13 .5 Linux kernel 2.6.13 .4 Linux kernel 2.6.13 .3 Linux kernel 2.6.13 .2 Linux kernel 2.6.13 .1 Linux kernel 2.6.13 -rc7 Linux kernel 2.6.13 -rc6 Linux kernel 2.6.13 -rc4 Linux kernel 2.6.13 -rc1 Linux kernel 2.6.13 Linux kernel 2.6.13 Linux kernel 2.6.12 rc6 Linux kernel 2.6.12 rc3 Linux kernel 2.6.12 rc2 Linux kernel 2.6.12 .6 Linux kernel 2.6.12 .5 Linux kernel 2.6.12 .4 Linux kernel 2.6.12 .3 Linux kernel 2.6.12 .22 Linux kernel 2.6.12 .2 Linux kernel 2.6.12 .12 Linux kernel 2.6.12 .1 Linux kernel 2.6.12 -rc5 Linux kernel 2.6.12 -rc4 Linux kernel 2.6.12 -rc1 Linux kernel 2.6.12 Linux kernel 2.6.12 Linux kernel 2.6.11 rc5 Linux kernel 2.6.11 rc1 Linux kernel 2.6.11 .9 Linux kernel 2.6.11 .8 Linux kernel 2.6.11 .7 Linux kernel 2.6.11 .6 Linux kernel 2.6.11 .5 Linux kernel 2.6.11 .4 Linux kernel 2.6.11 .3 Linux kernel 2.6.11 .2 Linux kernel 2.6.11 .12 Linux kernel 2.6.11 .11 Linux kernel 2.6.11 .10 Linux kernel 2.6.11 .1 Linux kernel 2.6.11 -rc4 Linux kernel 2.6.11 -rc3 Linux kernel 2.6.11 -rc2 Linux kernel 2.6.11 Linux kernel 2.6.11 Linux kernel 2.6.10 rc3 Linux kernel 2.6.10 rc2 Linux kernel 2.6.10 rc1 Linux kernel 2.6.10 Linux kernel 2.6.10 Linux kernel 2.6.9 rc4 Linux kernel 2.6.9 rc3 Linux kernel 2.6.9 rc2 Linux kernel 2.6.9 rc1 Linux kernel 2.6.9 final Linux kernel 2.6.9 Linux kernel 2.6.9 Linux kernel 2.6.8 rc4 Linux kernel 2.6.8 rc3 Linux kernel 2.6.8 rc2 Linux kernel 2.6.8 rc1 Linux kernel 2.6.8 Linux kernel 2.6.8 Linux kernel 2.6.7 rc3 Linux kernel 2.6.7 rc2 Linux kernel 2.6.7 rc1 Linux kernel 2.6.7 Linux kernel 2.6.7 Linux kernel 2.6.6 rc3 Linux kernel 2.6.6 rc2 Linux kernel 2.6.6 rc1 Linux kernel 2.6.6 Linux kernel 2.6.6 Linux kernel 2.6.5 rc3 Linux kernel 2.6.5 rc2 Linux kernel 2.6.5 rc1 Linux kernel 2.6.5 Linux kernel 2.6.4 rc3 Linux kernel 2.6.4 rc2 Linux kernel 2.6.4 rc1 Linux kernel 2.6.4 Linux kernel 2.6.4 Linux kernel 2.6.3 rc4 Linux kernel 2.6.3 rc3 Linux kernel 2.6.3 rc2 Linux kernel 2.6.3 rc1 Linux kernel 2.6.3 Linux kernel 2.6.3 Linux kernel 2.6.2 rc3 Linux kernel 2.6.2 rc2 Linux kernel 2.6.2 rc1 Linux kernel 2.6.2 Linux kernel 2.6.2 Linux kernel 2.6.1 rc3 Linux kernel 2.6.1 0 Linux kernel 2.6.1 -rc2 Linux kernel 2.6.1 -rc1 Linux kernel 2.6.1 Linux kernel 2.6 .10 Linux kernel 2.6 -test9-CVS Linux kernel 2.6 -test9 Linux kernel 2.6 -test8 Linux kernel 2.6 -test7 Linux kernel 2.6 -test6 Linux kernel 2.6 -test5 Linux kernel 2.6 -test4 Linux kernel 2.6 -test3 Linux kernel 2.6 -test2 Linux kernel 2.6 -test11 Linux kernel 2.6 -test10 Linux kernel 2.6 -test1 Linux kernel 2.6 Linux kernel 2.6.8.1 Linux kernel 2.6.18.1 Linux kernel 2.6.18-8.1.8.el5 Linux kernel 2.6.18-53 Linux kernel 2.6.18 Linux kernel 2.6.16.9 Linux kernel 2.6.16.7 Linux kernel 2.6.16.19 Linux kernel 2.6.16.13 Linux kernel 2.6.16.12 Linux kernel 2.6.16.11 Linux kernel 2.6.15.5 Linux kernel 2.6.15.4 Linux kernel 2.6.15.11 Linux kernel 2.6.15-27.48 Linux kernel 2.6.14.3 Linux kernel 2.6.14.2 Linux kernel 2.6.14.1 Linux kernel 2.6.13.4 Linux kernel 2.6.13.3 Linux kernel 2.6.13.2 Linux kernel 2.6.13.1 Linux kernel 2.6.12.6 Linux kernel 2.6.12.5 Linux kernel 2.6.12.4 Linux kernel 2.6.12.3 Linux kernel 2.6.12.2 Linux kernel 2.6.12.1 Linux kernel 2.6.11.8 Linux kernel 2.6.11.7 Linux kernel 2.6.11.6 Linux kernel 2.6.11.5 Linux kernel 2.6.11.4 Linux kernel 2.6.11.12 Linux kernel 2.6.11.11 Linux kernel 2.6.0 Avaya Voice Portal 5.1 Avaya Voice Portal 5.1 Avaya Voice Portal 5.0 SP2 Avaya Voice Portal 5.0 SP1 Avaya Voice Portal 5.0 Avaya IQ 5.1 Avaya IQ 5 Avaya IP Office Application Server 6.1 Avaya Communication Server 1000M Signaling Server 7.5 Avaya Communication Server 1000M Signaling Server 7.0 Avaya Communication Server 1000M Signaling Server 6.0 Avaya Communication Server 1000M 7.5 Avaya Communication Server 1000M 7.0 Avaya Communication Server 1000M 6.0 Avaya Communication Server 1000E Signaling Server 7.5 Avaya Communication Server 1000E Signaling Server 7.0 Avaya Communication Server 1000E Signaling Server 6.0 Avaya Communication Server 1000E 7.5 Avaya Communication Server 1000E 7.0 Avaya Communication Server 1000E 6.0 Avaya Aura System Platform 6.0 Avaya Aura System Platform 1.1 Avaya Aura System Manager 6.1 Avaya Aura System Manager 6.0 SP1 Avaya Aura System Manager 6.0 Avaya Aura System Manager 5.2 Avaya Aura Session Manager 6.0 Avaya Aura Session Manager 5.2 Avaya Aura Session Manager 1.1 Avaya Aura Presence Services 6.0 Avaya Aura Conferencing 6.0 Standard Avaya Aura Communication Manager 6.0.1 Avaya Aura Communication Manager 6.0 Avaya Aura Communication Manager 5.2 Avaya Aura Application Server 2.1 Avaya Aura Application Server 2.0 Avaya Aura Application Enablement Services 5.2.1 Avaya Aura Application Enablement Services 5.2 |
| Not Vulnerable: |
OpenVZ Project OpenVZ 028stab085.2 Linux kernel 2.6.19 -rc1 |
Discussion
Linux Kernel 'net/' Subsystem Socket Filter CVE-2010-4161 Local Information Disclosure Vulnerability
The Linux kernel is prone to a local information-disclosure vulnerability.
Local attackers can exploit this issue to obtain sensitive information that may lead to further attacks.
The Linux kernel is prone to a local information-disclosure vulnerability.
Local attackers can exploit this issue to obtain sensitive information that may lead to further attacks.
Exploit / POC
Linux Kernel 'net/' Subsystem Socket Filter CVE-2010-4161 Local Information Disclosure Vulnerability
Attackers require local interactive access to an affected computer to exploit this issue.
Attackers require local interactive access to an affected computer to exploit this issue.
Solution / Fix
Linux Kernel 'net/' Subsystem Socket Filter CVE-2010-4161 Local Information Disclosure Vulnerability
Solution:
Updates are available. Please see the references for more information.
Solution:
Updates are available. Please see the references for more information.
References
Linux Kernel 'net/' Subsystem Socket Filter CVE-2010-4161 Local Information Disclosure Vulnerability
References:
References:
- [NET]: Fix sk->sk_filter field access (Dmitry Mishin)
- Bug 652534 - (CVE-2010-4161) CVE-2010-4161 kernel: rhel5 commit 6865201191 cause (Eugene Teo)
- Download/kernel/rhel5/028stab085.2 (OpenVZ)
- Linux kernel Homepage (kernel.org)
- ASA-2011-020 kernel security, bug fix, and enhancement update (RHSA-2011-0004) (Avaya)