vendor:
Linux Kernel
by:
Jon Oberheide
7.5
CVSS
HIGH
Kernel Memory Disclosure
200
CWE
Product Name: Linux Kernel
Affected Version From: Linux Kernel < 2.6.14.6
Affected Version To: None provided
Patch Exists: YES
Related CWE: CVE-2005-4605
CPE: None provided
Platforms Tested: None provided
2005
Linux Kernel < 2.6.14.6 procfs Kernel Memory Disclosure
The procfs code (proc_misc.c) in Linux 2.6.14.3 and other versions before 2.6.15 allows attackers to read sensitive kernel memory via unspecified vectors in which a signed value is added to an unsigned value.
Mitigation:
Upgrade to Linux Kernel version 2.6.15 or later.