Name: CVE-2010-4079: Exposure of Sensitive Information to an Unauthorized Actor
Creator: Rapid7
Published: 2010-11-29T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2010-4079, CWE-200, CVSS 3.3, EPSS 0.0038

The ivtvfb_ioctl function in drivers/media/video/ivtv/ivtvfb.c in the Linux kernel before 2.6.36-rc8 does not properly initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via an FBIOGET_VBLANK ioctl call.

CVSS Details

CVSS 3.1 Base Score: 3.3

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Oracle_linux	—	Upgrade kernel	Oct 16, 2024	Nov 29, 2010
Ubuntu	—	Upgrade linux-image-2.6.32-28-sparc64Upgrade linux-image-2.6.32-28-lpiaUpgrade linux-image-2.6.35-30-serverUpgrade linux-image-2.6.35-25-serverUpgrade linux-image-2.6.32-312-ec2Upgrade linux-image-2.6.31-608-imx51Upgrade linux-image-2.6.31-307-ec2Upgrade linux-image-2.6.24-28-xenUpgrade linux-image-2.6.31-22-sparc64Upgrade linux-image-2.6.24-28-386Upgrade linux-image-2.6.35-27-powerpcUpgrade linux-image-2.6.32-28-genericUpgrade linux-image-2.6.31-22-generic-paeUpgrade linux-image-2.6.32-28-386Upgrade linux-image-2.6.35-25-generic-paeUpgrade linux-image-2.6.24-28-lpiacompatUpgrade linux-image-2.6.35-25-genericUpgrade linux-image-2.6.24-28-sparc64-smpUpgrade linux-image-2.6.32-28-ia64Upgrade linux-image-2.6.32-28-serverUpgrade linux-image-2.6.24-28-genericUpgrade linux-image-2.6.31-22-powerpcUpgrade linux-image-2.6.35-27-omapUpgrade linux-image-2.6.35-30-genericUpgrade linux-image-2.6.32-28-powerpc-smpUpgrade linux-image-2.6.35-25-virtualUpgrade linux-image-2.6.24-28-powerpc-smpUpgrade linux-image-2.6.35-27-powerpc64-smpUpgrade linux-image-2.6.35-25-powerpc64-smpUpgrade linux-image-2.6.35-25-powerpc-smpUpgrade linux-image-2.6.35-27-generic-paeUpgrade linux-image-2.6.32-28-powerpcUpgrade linux-image-2.6.24-28-powerpc64-smpUpgrade linux-image-2.6.31-22-lpiaUpgrade linux-image-2.6.32-28-versatileUpgrade linux-image-2.6.32-416-doveUpgrade linux-image-2.6.24-28-virtualUpgrade linux-image-2.6.24-28-itaniumUpgrade linux-image-2.6.24-28-hppa32Upgrade linux-image-2.6.24-28-mckinleyUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.35-27-versatileUpgrade linux-image-2.6.31-22-virtualUpgrade linux-image-2.6.35-25-powerpcUpgrade linux-image-2.6.31-112-imx51Upgrade linux-image-2.6.32-216-doveUpgrade linux-image-2.6.35-27-powerpc-smpUpgrade linux-image-2.6.35-30-generic-paeUpgrade linux-image-2.6.32-28-sparc64-smpUpgrade linux-image-2.6.35-27-serverUpgrade linux-image-2.6.31-22-genericUpgrade linux-image-2.6.24-28-lpiaUpgrade linux-image-2.6.32-28-preemptUpgrade linux-image-2.6.32-28-generic-paeUpgrade linux-image-2.6.31-22-powerpc64-smpUpgrade linux-image-2.6.24-28-rtUpgrade linux-image-2.6.32-28-virtualUpgrade linux-image-2.6.35-30-virtualUpgrade linux-image-2.6.24-28-sparc64Upgrade linux-image-2.6.31-22-sparc64-smpUpgrade linux-image-2.6.24-28-powerpcUpgrade linux-image-2.6.32-28-powerpc64-smpUpgrade linux-image-2.6.24-28-hppa64Upgrade linux-image-2.6.35-27-genericUpgrade linux-image-2.6.35-27-virtualUpgrade linux-image-2.6.31-22-386Upgrade linux-image-2.6.31-22-ia64Upgrade linux-image-2.6.31-22-serverUpgrade linux-image-2.6.35-25-omapUpgrade linux-image-2.6.35-25-versatileUpgrade linux-image-2.6.24-28-serverUpgrade linux-image-2.6.31-22-powerpc-smpUpgrade linux-image-2.6.24-28-openvz	Nov 8, 2024	Nov 29, 2010

Prioritize with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritize with Active Threat Intelligence