oss-security - Re: CVE request kernel: tcf_fill_node() infoleak due to typo in 9ef1d4c7

Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Thu, 15 Oct 2009 10:33:15 +0800
From: Eugene Teo <eugene@...hat.com>
To: oss-security@...ts.openwall.com
CC: "Steven M. Christey" <coley@...us.mitre.org>, Willy Tarreau <w@....eu>
Subject: Re: CVE request kernel: tcf_fill_node() infoleak due
 to typo in 9ef1d4c7

Eugene Teo wrote:
> Eugene Teo wrote:
>> [...]
>>>   CVE-2005-4881 - tc_fill_qdisc()  (at least)
>>
>> This requires http://patchwork.ozlabs.org/patch/35412/ too. There was 
>> a typo in the upstream commit 9ef1d4c7.
> 
> I'm not sure but perhaps this needs a new CVE name. This infoleak bug 
> was introduced in 2005, but was discovered and fixed recently.

This is assigned with CVE-2009-3612 - incomplete fix for CVE-2005-4881.

Thanks, Eugene
-- 
Eugene Teo / Red Hat Security Response Team

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.