Name: CVE-2010-3078: Exposure of Sensitive Information to an Unauthorized Actor
Creator: Rapid7
Published: 2010-09-21T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2010-3078, CWE-200, CVSS 5.5, EPSS 0.00083

The xfs_ioc_fsgetxattr function in fs/xfs/linux-2.6/xfs_ioctl.c in the Linux kernel before 2.6.36-rc4 does not initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via an ioctl call.

CVSS Details

CVSS 3.1 Base Score: 5.5

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Centos_linux	—	Upgrade kernel-xen-develUpgrade kernel-docUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-PAE-develUpgrade kernel-xenUpgrade kernel-PAEUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel	Dec 1, 2016	Sep 21, 2010
Oracle_linux	—	Upgrade kernel	Oct 16, 2024	Sep 21, 2010
Suse	—	Upgrade kernel-kdumpUpgrade kernel-paeUpgrade ext4dev-kmp-paeUpgrade kernel-default-baseUpgrade kernel-xenUpgrade kernel-trace-develUpgrade ext4dev-kmp-vmiUpgrade kernel-pae-develUpgrade kernel-trace-baseUpgrade ext4dev-kmp-defaultUpgrade ext4dev-kmp-xenUpgrade kernel-defaultUpgrade kernel-vmiUpgrade kernel-vmi-baseUpgrade kernel-xen-develUpgrade kernel-symsUpgrade kernel-sourceUpgrade ext4dev-kmp-ppc64Upgrade kernel-ppc64Upgrade iscsitarget-kmp-defaultUpgrade kernel-xen-baseUpgrade kernel-ppc64-develUpgrade kernel-docsUpgrade kernel-default-develUpgrade kernel-default-manUpgrade kernel-traceUpgrade kernel-ppc64-baseUpgrade oracleasm-kmp-defaultUpgrade kernel-pae-base	Feb 17, 2015	Jun 28, 2013
Ubuntu	—	Upgrade linux-image-2.6.32-25-powerpcUpgrade linux-image-2.6.15-55-server-bigironUpgrade linux-image-2.6.15-55-amd64-genericUpgrade linux-image-2.6.24-28-hppa32Upgrade linux-image-2.6.15-55-sparc64-smpUpgrade linux-image-2.6.24-28-powerpcUpgrade linux-image-2.6.32-25-generic-paeUpgrade linux-image-2.6.35-22-versatileUpgrade linux-image-2.6.32-25-lpiaUpgrade linux-image-2.6.15-55-amd64-xeonUpgrade linux-image-2.6.32-25-sparc64-smpUpgrade linux-image-2.6.24-28-openvzUpgrade linux-image-2.6.31-22-sparc64-smpUpgrade linux-image-2.6.32-216-doveUpgrade linux-image-2.6.31-22-serverUpgrade linux-image-2.6.35-25-serverUpgrade linux-image-2.6.32-25-serverUpgrade linux-image-2.6.15-55-k7Upgrade linux-image-2.6.24-28-serverUpgrade linux-image-2.6.24-28-lpiaUpgrade linux-image-2.6.15-55-hppa64Upgrade linux-image-2.6.31-22-genericUpgrade linux-image-2.6.15-55-powerpcUpgrade linux-image-2.6.32-25-virtualUpgrade linux-image-2.6.31-22-386Upgrade linux-image-2.6.31-22-virtualUpgrade linux-image-2.6.24-28-sparc64Upgrade linux-image-2.6.24-28-mckinleyUpgrade linux-image-2.6.28-19-versatileUpgrade linux-image-2.6.15-55-686Upgrade linux-image-2.6.24-28-rtUpgrade linux-image-2.6.31-22-ia64Upgrade linux-image-2.6.32-25-genericUpgrade linux-image-2.6.32-25-preemptUpgrade linux-image-2.6.35-22-generic-paeUpgrade linux-image-2.6.32-25-386Upgrade linux-image-2.6.35-22-powerpcUpgrade linux-image-2.6.24-28-hppa64Upgrade linux-image-2.6.28-19-ixp4xxUpgrade linux-image-2.6.35-22-omapUpgrade linux-image-2.6.28-19-virtualUpgrade linux-image-2.6.15-55-itaniumUpgrade linux-image-2.6.32-25-versatileUpgrade linux-image-2.6.24-28-lpiacompatUpgrade linux-image-2.6.15-55-hppa32-smpUpgrade linux-image-2.6.32-25-sparc64Upgrade linux-image-2.6.24-28-386Upgrade linux-image-2.6.31-307-ec2Upgrade linux-image-2.6.24-28-powerpc-smpUpgrade linux-image-2.6.15-55-amd64-serverUpgrade linux-image-2.6.31-22-generic-paeUpgrade linux-image-2.6.32-25-ia64Upgrade linux-image-2.6.15-55-hppa64-smpUpgrade linux-image-2.6.24-28-sparc64-smpUpgrade linux-image-2.6.28-19-serverUpgrade linux-image-2.6.31-22-sparc64Upgrade linux-image-2.6.32-25-powerpc-smpUpgrade linux-image-2.6.31-22-lpiaUpgrade linux-image-2.6.35-25-genericUpgrade linux-image-2.6.15-55-hppa32Upgrade linux-image-2.6.31-112-imx51Upgrade linux-image-2.6.35-22-powerpc-smpUpgrade linux-image-2.6.31-22-powerpc-smpUpgrade linux-image-2.6.35-22-serverUpgrade linux-image-2.6.32-416-doveUpgrade linux-image-2.6.31-22-powerpc64-smpUpgrade linux-image-2.6.28-19-iop32xUpgrade linux-image-2.6.31-608-imx51Upgrade linux-image-2.6.24-28-itaniumUpgrade linux-image-2.6.35-22-powerpc64-smpUpgrade linux-image-2.6.31-22-powerpcUpgrade linux-image-2.6.32-309-ec2Upgrade linux-image-2.6.15-55-sparc64Upgrade linux-image-2.6.15-55-mckinley-smpUpgrade linux-image-2.6.35-22-virtualUpgrade linux-image-2.6.15-55-powerpc-smpUpgrade linux-image-2.6.24-28-virtualUpgrade linux-image-2.6.24-28-xenUpgrade linux-image-2.6.24-28-powerpc64-smpUpgrade linux-image-2.6.35-22-genericUpgrade linux-image-2.6.35-25-generic-paeUpgrade linux-image-2.6.15-55-serverUpgrade linux-image-2.6.28-19-lpiaUpgrade linux-image-2.6.15-55-mckinleyUpgrade linux-image-2.6.15-55-386Upgrade linux-image-2.6.15-55-itanium-smpUpgrade linux-image-2.6.24-28-genericUpgrade linux-image-2.6.15-55-powerpc64-smpUpgrade linux-image-2.6.15-55-amd64-k8Upgrade linux-image-2.6.32-25-powerpc64-smpUpgrade linux-image-2.6.35-25-virtualUpgrade linux-image-2.6.28-19-imx51Upgrade linux-image-2.6.28-19-generic	Nov 8, 2024	Sep 21, 2010
Vmsa 2011 0012	—	Upgrade VMware ESX 4.0 to build number 480973Upgrade VMware ESX 4.1 to build number 502767	Oct 20, 2011	Sep 21, 2010

Prioritize with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritize with Active Threat Intelligence