oss-security - Re: [Security] CVE request: kernel: taskstats/procfs io infoleak (was: taskstats authorized

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Wed, 29 Jun 2011 10:32:40 -0700
From: Linus Torvalds <torvalds@...ux-foundation.org>
To: Vasiliy Kulikov <segoon@...nwall.com>
Cc: Andrew Morton <akpm@...ux-foundation.org>, oss-security@...ts.openwall.com,
        security@...nel.org
Subject: Re: [Security] CVE request: kernel: taskstats/procfs io infoleak
 (was: taskstats authorized_keys presence infoleak PoC)

On Wed, Jun 29, 2011 at 10:21 AM, Vasiliy Kulikov <segoon@...nwall.com> wrote:
>
> So, with rounded read_characters value it's possible to learn privkey
> length.

Umm. You can trivially figure that out from the public key lenth
already, can't you?

So that's not very special, afaik.

                    Linus

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.