oss-security - Re: CVE request: kernel: tc: uninitialised kernel memory leak

Openwall Project		/home Owl JtR Pro crypt pam_passwdqc tcb phpass scanlogd popa3d msulogin / Linux BIND / advisories presentations / services donations / wordlists passwords / NEWS community lists Wiki CVSweb mirrors signatures
bringing security into open environments

Password Recovery Resources on the Net

[<prev] [next>] [<thread-prev] [thread-next>] [month] [year] [list]

Date: Thu, 17 Sep 2009 12:11:56 +0800
From: Eugene Teo <eugene@...hat.com>
To: oss-security@...ts.openwall.com
CC: Willy Tarreau <w@....eu>, "Steven M. Christey" <coley@...us.mitre.org>
Subject: Re: CVE request: kernel: tc: uninitialised kernel
 memory leak

> So for now, we have:
> 
>   CVE-2009-3228 - tc_fill_tclass()

Fixed in v2.6.31-rc9, v2.4.37.6 (096ed17f).

>   CVE-2005-4881 - tc_fill_qdisc()  (at least)

Fixed in v2.6.13-rc1, v2.4.37.6 too (all three patches).

> So, let's go with these two numbers.  I'll fill them out later.  (My head
> hurts.)

Wow, my head hurts too... ;)

Eugene

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.