Vulnerability-Lookup

RHSA-2011_0028

Vulnerability from csaf_redhat - Published: 2011-01-13 10:59 - Updated: 2024-11-22 03:57

Summary

Red Hat Security Advisory: kvm security and bug fix update

Severity

Low

Notes

Topic: Updated kvm packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.

Details: KVM (Kernel-based Virtual Machine) is a full virtualization solution for Linux on AMD64 and Intel 64 systems. KVM is a Linux kernel module built for the standard Red Hat Enterprise Linux kernel. A data structure field in kvm_vcpu_ioctl_x86_get_vcpu_events() in QEMU-KVM was not initialized properly before being copied to user-space. A privileged host user with access to "/dev/kvm" could use this flaw to leak kernel stack memory to user-space. (CVE-2010-4525) Red Hat would like to thank Stephan Mueller of atsec information security for reporting this issue. These updated packages also fix several bugs. Documentation for these bug fixes will be available shortly in the "kvm" section of the Red Hat Enterprise Linux 5.6 Technical Notes, linked to in the References. All KVM users should upgrade to these updated packages, which resolve this issue as well as fixing the bugs noted in the Technical Notes. Note: The procedure in the Solution section must be performed before this update will take effect.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2010-4525

Linux kernel 2.6.33 and 2.6.34.y does not initialize the kvm_vcpu_events->interrupt.pad structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via unspecified vectors.

1.9 ()


                
                  AV:L/AC:M/Au:N/C:P/I:N/A:N

Affected products

Fixed 14 products

Product	Version	Remediation
Unresolved product id: 5Client-VT:kmod-kvm-0:83-224.el5.x86_64	—	Vendor Fix fix
Unresolved product id: 5Client-VT:kmod-kvm-debug-0:83-224.el5.x86_64	—	Vendor Fix fix
Unresolved product id: 5Client-VT:kvm-0:83-224.el5.src	—	Vendor Fix fix
Unresolved product id: 5Client-VT:kvm-0:83-224.el5.x86_64	—	Vendor Fix fix
Unresolved product id: 5Client-VT:kvm-debuginfo-0:83-224.el5.x86_64	—	Vendor Fix fix
Unresolved product id: 5Client-VT:kvm-qemu-img-0:83-224.el5.x86_64	—	Vendor Fix fix
Unresolved product id: 5Client-VT:kvm-tools-0:83-224.el5.x86_64	—	Vendor Fix fix
Unresolved product id: 5Server-VT:kmod-kvm-0:83-224.el5.x86_64	—	Vendor Fix fix
Unresolved product id: 5Server-VT:kmod-kvm-debug-0:83-224.el5.x86_64	—	Vendor Fix fix
Unresolved product id: 5Server-VT:kvm-0:83-224.el5.src	—	Vendor Fix fix
Unresolved product id: 5Server-VT:kvm-0:83-224.el5.x86_64	—	Vendor Fix fix
Unresolved product id: 5Server-VT:kvm-debuginfo-0:83-224.el5.x86_64	—	Vendor Fix fix
Unresolved product id: 5Server-VT:kvm-qemu-img-0:83-224.el5.x86_64	—	Vendor Fix fix
Unresolved product id: 5Server-VT:kvm-tools-0:83-224.el5.x86_64	—	Vendor Fix fix

Threats

Impact Low

References

60 references

URL	Category
https://access.redhat.com/errata/RHSA-2011:0028	self
https://access.redhat.com/security/updates/classi…	external
http://docs.redhat.com/docs/en-US/Red_Hat_Enterpr…	external
https://bugzilla.redhat.com/show_bug.cgi?id=503118	external
https://bugzilla.redhat.com/show_bug.cgi?id=510630	external
https://bugzilla.redhat.com/show_bug.cgi?id=513765	external
https://bugzilla.redhat.com/show_bug.cgi?id=514578	external
https://bugzilla.redhat.com/show_bug.cgi?id=517565	external
https://bugzilla.redhat.com/show_bug.cgi?id=517814	external
https://bugzilla.redhat.com/show_bug.cgi?id=520572	external
https://bugzilla.redhat.com/show_bug.cgi?id=521247	external
https://bugzilla.redhat.com/show_bug.cgi?id=533078	external
https://bugzilla.redhat.com/show_bug.cgi?id=539642	external
https://bugzilla.redhat.com/show_bug.cgi?id=542954	external
https://bugzilla.redhat.com/show_bug.cgi?id=555727	external
https://bugzilla.redhat.com/show_bug.cgi?id=569743	external
https://bugzilla.redhat.com/show_bug.cgi?id=572825	external
https://bugzilla.redhat.com/show_bug.cgi?id=574621	external
https://bugzilla.redhat.com/show_bug.cgi?id=575585	external
https://bugzilla.redhat.com/show_bug.cgi?id=580410	external
https://bugzilla.redhat.com/show_bug.cgi?id=580637	external
https://bugzilla.redhat.com/show_bug.cgi?id=582038	external
https://bugzilla.redhat.com/show_bug.cgi?id=583947	external
https://bugzilla.redhat.com/show_bug.cgi?id=587604	external
https://bugzilla.redhat.com/show_bug.cgi?id=587605	external
https://bugzilla.redhat.com/show_bug.cgi?id=588251	external
https://bugzilla.redhat.com/show_bug.cgi?id=588878	external
https://bugzilla.redhat.com/show_bug.cgi?id=589017	external
https://bugzilla.redhat.com/show_bug.cgi?id=592021	external
https://bugzilla.redhat.com/show_bug.cgi?id=598042	external
https://bugzilla.redhat.com/show_bug.cgi?id=598488	external
https://bugzilla.redhat.com/show_bug.cgi?id=601494	external
https://bugzilla.redhat.com/show_bug.cgi?id=603026	external
https://bugzilla.redhat.com/show_bug.cgi?id=605701	external
https://bugzilla.redhat.com/show_bug.cgi?id=606238	external
https://bugzilla.redhat.com/show_bug.cgi?id=606394	external
https://bugzilla.redhat.com/show_bug.cgi?id=606434	external
https://bugzilla.redhat.com/show_bug.cgi?id=606651	external
https://bugzilla.redhat.com/show_bug.cgi?id=606953	external
https://bugzilla.redhat.com/show_bug.cgi?id=611982	external
https://bugzilla.redhat.com/show_bug.cgi?id=619268	external
https://bugzilla.redhat.com/show_bug.cgi?id=627343	external
https://bugzilla.redhat.com/show_bug.cgi?id=629333	external
https://bugzilla.redhat.com/show_bug.cgi?id=629334	external
https://bugzilla.redhat.com/show_bug.cgi?id=632707	external
https://bugzilla.redhat.com/show_bug.cgi?id=637267	external
https://bugzilla.redhat.com/show_bug.cgi?id=640949	external
https://bugzilla.redhat.com/show_bug.cgi?id=641823	external
https://bugzilla.redhat.com/show_bug.cgi?id=643272	external
https://bugzilla.redhat.com/show_bug.cgi?id=643317	external
https://bugzilla.redhat.com/show_bug.cgi?id=645798	external
https://bugzilla.redhat.com/show_bug.cgi?id=648328	external
https://bugzilla.redhat.com/show_bug.cgi?id=651715	external
https://bugzilla.redhat.com/show_bug.cgi?id=655990	external
https://bugzilla.redhat.com/show_bug.cgi?id=665470	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2010-4525	self
https://bugzilla.redhat.com/show_bug.cgi?id=665470	external
https://www.cve.org/CVERecord?id=CVE-2010-4525	external
https://nvd.nist.gov/vuln/detail/CVE-2010-4525	external

Acknowledgments

atsec information security Stephan Mueller

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Low"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Updated kvm packages that fix one security issue and several bugs are now\navailable for Red Hat Enterprise Linux 5.\n\nThe Red Hat Security Response Team has rated this update as having low\nsecurity impact. A Common Vulnerability Scoring System (CVSS) base score,\nwhich gives a detailed severity rating, is available from the CVE link in\nthe References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "KVM (Kernel-based Virtual Machine) is a full virtualization solution for\nLinux on AMD64 and Intel 64 systems. KVM is a Linux kernel module built for\nthe standard Red Hat Enterprise Linux kernel.\n\nA data structure field in kvm_vcpu_ioctl_x86_get_vcpu_events() in QEMU-KVM\nwas not initialized properly before being copied to user-space. A\nprivileged host user with access to \"/dev/kvm\" could use this flaw to leak\nkernel stack memory to user-space. (CVE-2010-4525)\n\nRed Hat would like to thank Stephan Mueller of atsec information security\nfor reporting this issue.\n\nThese updated packages also fix several bugs. Documentation for these bug\nfixes will be available shortly in the \"kvm\" section of the Red Hat\nEnterprise Linux 5.6 Technical Notes, linked to in the References.\n\nAll KVM users should upgrade to these updated packages, which resolve this\nissue as well as fixing the bugs noted in the Technical Notes. Note: The\nprocedure in the Solution section must be performed before this update will\ntake effect.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2011:0028",
        "url": "https://access.redhat.com/errata/RHSA-2011:0028"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#low",
        "url": "https://access.redhat.com/security/updates/classification/#low"
      },
      {
        "category": "external",
        "summary": "http://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/5/html/5.6_Technical_Notes/index.html",
        "url": "http://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/5/html/5.6_Technical_Notes/index.html"
      },
      {
        "category": "external",
        "summary": "503118",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=503118"
      },
      {
        "category": "external",
        "summary": "510630",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=510630"
      },
      {
        "category": "external",
        "summary": "513765",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=513765"
      },
      {
        "category": "external",
        "summary": "514578",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=514578"
      },
      {
        "category": "external",
        "summary": "517565",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=517565"
      },
      {
        "category": "external",
        "summary": "517814",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=517814"
      },
      {
        "category": "external",
        "summary": "520572",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=520572"
      },
      {
        "category": "external",
        "summary": "521247",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=521247"
      },
      {
        "category": "external",
        "summary": "533078",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=533078"
      },
      {
        "category": "external",
        "summary": "539642",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=539642"
      },
      {
        "category": "external",
        "summary": "542954",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=542954"
      },
      {
        "category": "external",
        "summary": "555727",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=555727"
      },
      {
        "category": "external",
        "summary": "569743",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=569743"
      },
      {
        "category": "external",
        "summary": "572825",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=572825"
      },
      {
        "category": "external",
        "summary": "574621",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=574621"
      },
      {
        "category": "external",
        "summary": "575585",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=575585"
      },
      {
        "category": "external",
        "summary": "580410",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=580410"
      },
      {
        "category": "external",
        "summary": "580637",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=580637"
      },
      {
        "category": "external",
        "summary": "582038",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=582038"
      },
      {
        "category": "external",
        "summary": "583947",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=583947"
      },
      {
        "category": "external",
        "summary": "587604",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=587604"
      },
      {
        "category": "external",
        "summary": "587605",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=587605"
      },
      {
        "category": "external",
        "summary": "588251",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=588251"
      },
      {
        "category": "external",
        "summary": "588878",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=588878"
      },
      {
        "category": "external",
        "summary": "589017",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=589017"
      },
      {
        "category": "external",
        "summary": "592021",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=592021"
      },
      {
        "category": "external",
        "summary": "598042",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=598042"
      },
      {
        "category": "external",
        "summary": "598488",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=598488"
      },
      {
        "category": "external",
        "summary": "601494",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=601494"
      },
      {
        "category": "external",
        "summary": "603026",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=603026"
      },
      {
        "category": "external",
        "summary": "605701",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=605701"
      },
      {
        "category": "external",
        "summary": "606238",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=606238"
      },
      {
        "category": "external",
        "summary": "606394",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=606394"
      },
      {
        "category": "external",
        "summary": "606434",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=606434"
      },
      {
        "category": "external",
        "summary": "606651",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=606651"
      },
      {
        "category": "external",
        "summary": "606953",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=606953"
      },
      {
        "category": "external",
        "summary": "611982",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=611982"
      },
      {
        "category": "external",
        "summary": "619268",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=619268"
      },
      {
        "category": "external",
        "summary": "627343",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=627343"
      },
      {
        "category": "external",
        "summary": "629333",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=629333"
      },
      {
        "category": "external",
        "summary": "629334",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=629334"
      },
      {
        "category": "external",
        "summary": "632707",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=632707"
      },
      {
        "category": "external",
        "summary": "637267",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=637267"
      },
      {
        "category": "external",
        "summary": "640949",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=640949"
      },
      {
        "category": "external",
        "summary": "641823",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=641823"
      },
      {
        "category": "external",
        "summary": "643272",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=643272"
      },
      {
        "category": "external",
        "summary": "643317",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=643317"
      },
      {
        "category": "external",
        "summary": "645798",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=645798"
      },
      {
        "category": "external",
        "summary": "648328",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=648328"
      },
      {
        "category": "external",
        "summary": "651715",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=651715"
      },
      {
        "category": "external",
        "summary": "655990",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=655990"
      },
      {
        "category": "external",
        "summary": "665470",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=665470"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_0028.json"
      }
    ],
    "title": "Red Hat Security Advisory: kvm security and bug fix update",
    "tracking": {
      "current_release_date": "2024-11-22T03:57:11+00:00",
      "generator": {
        "date": "2024-11-22T03:57:11+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.2.1"
        }
      },
      "id": "RHSA-2011:0028",
      "initial_release_date": "2011-01-13T10:59:00+00:00",
      "revision_history": [
        {
          "date": "2011-01-13T10:59:00+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2011-01-13T06:03:39+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-22T03:57:11+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Desktop Multi OS (v. 5 client)",
                "product": {
                  "name": "Red Hat Enterprise Linux Desktop Multi OS (v. 5 client)",
                  "product_id": "5Client-VT",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_virtualization:5::client"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Virtualization (v. 5 server)",
                "product": {
                  "name": "Red Hat Enterprise Linux Virtualization (v. 5 server)",
                  "product_id": "5Server-VT",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_virtualization:5::server"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kvm-tools-0:83-224.el5.x86_64",
                "product": {
                  "name": "kvm-tools-0:83-224.el5.x86_64",
                  "product_id": "kvm-tools-0:83-224.el5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kvm-tools@83-224.el5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kvm-debuginfo-0:83-224.el5.x86_64",
                "product": {
                  "name": "kvm-debuginfo-0:83-224.el5.x86_64",
                  "product_id": "kvm-debuginfo-0:83-224.el5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kvm-debuginfo@83-224.el5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kvm-0:83-224.el5.x86_64",
                "product": {
                  "name": "kvm-0:83-224.el5.x86_64",
                  "product_id": "kvm-0:83-224.el5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kvm@83-224.el5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kvm-qemu-img-0:83-224.el5.x86_64",
                "product": {
                  "name": "kvm-qemu-img-0:83-224.el5.x86_64",
                  "product_id": "kvm-qemu-img-0:83-224.el5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kvm-qemu-img@83-224.el5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kmod-kvm-debug-0:83-224.el5.x86_64",
                "product": {
                  "name": "kmod-kvm-debug-0:83-224.el5.x86_64",
                  "product_id": "kmod-kvm-debug-0:83-224.el5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kmod-kvm-debug@83-224.el5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kmod-kvm-0:83-224.el5.x86_64",
                "product": {
                  "name": "kmod-kvm-0:83-224.el5.x86_64",
                  "product_id": "kmod-kvm-0:83-224.el5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kmod-kvm@83-224.el5?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kvm-0:83-224.el5.src",
                "product": {
                  "name": "kvm-0:83-224.el5.src",
                  "product_id": "kvm-0:83-224.el5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kvm@83-224.el5?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kmod-kvm-0:83-224.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop Multi OS (v. 5 client)",
          "product_id": "5Client-VT:kmod-kvm-0:83-224.el5.x86_64"
        },
        "product_reference": "kmod-kvm-0:83-224.el5.x86_64",
        "relates_to_product_reference": "5Client-VT"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kmod-kvm-debug-0:83-224.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop Multi OS (v. 5 client)",
          "product_id": "5Client-VT:kmod-kvm-debug-0:83-224.el5.x86_64"
        },
        "product_reference": "kmod-kvm-debug-0:83-224.el5.x86_64",
        "relates_to_product_reference": "5Client-VT"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kvm-0:83-224.el5.src as a component of Red Hat Enterprise Linux Desktop Multi OS (v. 5 client)",
          "product_id": "5Client-VT:kvm-0:83-224.el5.src"
        },
        "product_reference": "kvm-0:83-224.el5.src",
        "relates_to_product_reference": "5Client-VT"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kvm-0:83-224.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop Multi OS (v. 5 client)",
          "product_id": "5Client-VT:kvm-0:83-224.el5.x86_64"
        },
        "product_reference": "kvm-0:83-224.el5.x86_64",
        "relates_to_product_reference": "5Client-VT"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kvm-debuginfo-0:83-224.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop Multi OS (v. 5 client)",
          "product_id": "5Client-VT:kvm-debuginfo-0:83-224.el5.x86_64"
        },
        "product_reference": "kvm-debuginfo-0:83-224.el5.x86_64",
        "relates_to_product_reference": "5Client-VT"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kvm-qemu-img-0:83-224.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop Multi OS (v. 5 client)",
          "product_id": "5Client-VT:kvm-qemu-img-0:83-224.el5.x86_64"
        },
        "product_reference": "kvm-qemu-img-0:83-224.el5.x86_64",
        "relates_to_product_reference": "5Client-VT"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kvm-tools-0:83-224.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop Multi OS (v. 5 client)",
          "product_id": "5Client-VT:kvm-tools-0:83-224.el5.x86_64"
        },
        "product_reference": "kvm-tools-0:83-224.el5.x86_64",
        "relates_to_product_reference": "5Client-VT"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kmod-kvm-0:83-224.el5.x86_64 as a component of Red Hat Enterprise Linux Virtualization (v. 5 server)",
          "product_id": "5Server-VT:kmod-kvm-0:83-224.el5.x86_64"
        },
        "product_reference": "kmod-kvm-0:83-224.el5.x86_64",
        "relates_to_product_reference": "5Server-VT"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kmod-kvm-debug-0:83-224.el5.x86_64 as a component of Red Hat Enterprise Linux Virtualization (v. 5 server)",
          "product_id": "5Server-VT:kmod-kvm-debug-0:83-224.el5.x86_64"
        },
        "product_reference": "kmod-kvm-debug-0:83-224.el5.x86_64",
        "relates_to_product_reference": "5Server-VT"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kvm-0:83-224.el5.src as a component of Red Hat Enterprise Linux Virtualization (v. 5 server)",
          "product_id": "5Server-VT:kvm-0:83-224.el5.src"
        },
        "product_reference": "kvm-0:83-224.el5.src",
        "relates_to_product_reference": "5Server-VT"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kvm-0:83-224.el5.x86_64 as a component of Red Hat Enterprise Linux Virtualization (v. 5 server)",
          "product_id": "5Server-VT:kvm-0:83-224.el5.x86_64"
        },
        "product_reference": "kvm-0:83-224.el5.x86_64",
        "relates_to_product_reference": "5Server-VT"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kvm-debuginfo-0:83-224.el5.x86_64 as a component of Red Hat Enterprise Linux Virtualization (v. 5 server)",
          "product_id": "5Server-VT:kvm-debuginfo-0:83-224.el5.x86_64"
        },
        "product_reference": "kvm-debuginfo-0:83-224.el5.x86_64",
        "relates_to_product_reference": "5Server-VT"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kvm-qemu-img-0:83-224.el5.x86_64 as a component of Red Hat Enterprise Linux Virtualization (v. 5 server)",
          "product_id": "5Server-VT:kvm-qemu-img-0:83-224.el5.x86_64"
        },
        "product_reference": "kvm-qemu-img-0:83-224.el5.x86_64",
        "relates_to_product_reference": "5Server-VT"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kvm-tools-0:83-224.el5.x86_64 as a component of Red Hat Enterprise Linux Virtualization (v. 5 server)",
          "product_id": "5Server-VT:kvm-tools-0:83-224.el5.x86_64"
        },
        "product_reference": "kvm-tools-0:83-224.el5.x86_64",
        "relates_to_product_reference": "5Server-VT"
      }
    ]
  },
  "vulnerabilities": [
    {
      "acknowledgments": [
        {
          "names": [
            "Stephan Mueller"
          ],
          "organization": "atsec information security"
        }
      ],
      "cve": "CVE-2010-4525",
      "discovery_date": "2010-12-24T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "665470"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Linux kernel 2.6.33 and 2.6.34.y does not initialize the kvm_vcpu_events-\u003einterrupt.pad structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via unspecified vectors.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kvm: x86: zero kvm_vcpu_events-\u003einterrupt.pad infoleak",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-VT:kmod-kvm-0:83-224.el5.x86_64",
          "5Client-VT:kmod-kvm-debug-0:83-224.el5.x86_64",
          "5Client-VT:kvm-0:83-224.el5.src",
          "5Client-VT:kvm-0:83-224.el5.x86_64",
          "5Client-VT:kvm-debuginfo-0:83-224.el5.x86_64",
          "5Client-VT:kvm-qemu-img-0:83-224.el5.x86_64",
          "5Client-VT:kvm-tools-0:83-224.el5.x86_64",
          "5Server-VT:kmod-kvm-0:83-224.el5.x86_64",
          "5Server-VT:kmod-kvm-debug-0:83-224.el5.x86_64",
          "5Server-VT:kvm-0:83-224.el5.src",
          "5Server-VT:kvm-0:83-224.el5.x86_64",
          "5Server-VT:kvm-debuginfo-0:83-224.el5.x86_64",
          "5Server-VT:kvm-qemu-img-0:83-224.el5.x86_64",
          "5Server-VT:kvm-tools-0:83-224.el5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2010-4525"
        },
        {
          "category": "external",
          "summary": "RHBZ#665470",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=665470"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2010-4525",
          "url": "https://www.cve.org/CVERecord?id=CVE-2010-4525"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-4525",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-4525"
        }
      ],
      "release_date": "2011-01-05T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2011-01-13T10:59:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259\n\nThe following procedure must be performed before this update will take\neffect:\n\n1) Stop all KVM guest virtual machines.\n\n2) Either reboot the hypervisor machine or, as the root user, remove (using\n\"modprobe -r [module]\") and reload (using \"modprobe [module]\") all of the\nfollowing modules which are currently running (determined using \"lsmod\"):\nkvm, ksm, kvm-intel or kvm-amd.\n\n3) Restart the KVM guest virtual machines.",
          "product_ids": [
            "5Client-VT:kmod-kvm-0:83-224.el5.x86_64",
            "5Client-VT:kmod-kvm-debug-0:83-224.el5.x86_64",
            "5Client-VT:kvm-0:83-224.el5.src",
            "5Client-VT:kvm-0:83-224.el5.x86_64",
            "5Client-VT:kvm-debuginfo-0:83-224.el5.x86_64",
            "5Client-VT:kvm-qemu-img-0:83-224.el5.x86_64",
            "5Client-VT:kvm-tools-0:83-224.el5.x86_64",
            "5Server-VT:kmod-kvm-0:83-224.el5.x86_64",
            "5Server-VT:kmod-kvm-debug-0:83-224.el5.x86_64",
            "5Server-VT:kvm-0:83-224.el5.src",
            "5Server-VT:kvm-0:83-224.el5.x86_64",
            "5Server-VT:kvm-debuginfo-0:83-224.el5.x86_64",
            "5Server-VT:kvm-qemu-img-0:83-224.el5.x86_64",
            "5Server-VT:kvm-tools-0:83-224.el5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2011:0028"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 1.9,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "NONE",
            "vectorString": "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "version": "2.0"
          },
          "products": [
            "5Client-VT:kmod-kvm-0:83-224.el5.x86_64",
            "5Client-VT:kmod-kvm-debug-0:83-224.el5.x86_64",
            "5Client-VT:kvm-0:83-224.el5.src",
            "5Client-VT:kvm-0:83-224.el5.x86_64",
            "5Client-VT:kvm-debuginfo-0:83-224.el5.x86_64",
            "5Client-VT:kvm-qemu-img-0:83-224.el5.x86_64",
            "5Client-VT:kvm-tools-0:83-224.el5.x86_64",
            "5Server-VT:kmod-kvm-0:83-224.el5.x86_64",
            "5Server-VT:kmod-kvm-debug-0:83-224.el5.x86_64",
            "5Server-VT:kvm-0:83-224.el5.src",
            "5Server-VT:kvm-0:83-224.el5.x86_64",
            "5Server-VT:kvm-debuginfo-0:83-224.el5.x86_64",
            "5Server-VT:kvm-qemu-img-0:83-224.el5.x86_64",
            "5Server-VT:kvm-tools-0:83-224.el5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "kvm: x86: zero kvm_vcpu_events-\u003einterrupt.pad infoleak"
    }
  ]
}

CVE-2010-4525 (GCVE-0-2010-4525)

Vulnerability from cvelistv5 – Published: 2011-01-11 01:00 – Updated: 2024-08-07 03:51

Summary

Severity

No CVSS data available.

CWE

Assigner

redhat CNA under the redhat root

CNA scorecard B 82/100 over 1035 records in the last 180 days details

References

11 references

URL	Tags
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
http://www.openwall.com/lists/oss-security/2011/01/05/9	mailing-listx_refsource_MLIST
http://www.redhat.com/support/errata/RHSA-2011-00…	vendor-advisoryx_refsource_REDHAT
http://osvdb.org/70377	vdb-entryx_refsource_OSVDB
http://www.redhat.com/support/errata/RHSA-2011-00…	vendor-advisoryx_refsource_REDHAT
http://www.securityfocus.com/bid/45676	vdb-entryx_refsource_BID
http://www.openwall.com/lists/oss-security/2011/01/05/1	mailing-listx_refsource_MLIST
http://www.openwall.com/lists/oss-security/2011/01/06/3	mailing-listx_refsource_MLIST
http://secunia.com/advisories/42890	third-party-advisoryx_refsource_SECUNIA
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2…	x_refsource_MISC
http://www.vupen.com/english/advisories/2011/0123	vdb-entryx_refsource_VUPEN

Date Public

2011-01-05 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T03:51:17.033Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "kernel-kvmvcpueventsinterrupt-info-disc(64519)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/64519"
          },
          {
            "name": "[oss-security] 20110105 Re: CVE-2010-4525 kvm: x86: zero kvm_vcpu_events-\u003einterrupt.pad infoleak",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2011/01/05/9"
          },
          {
            "name": "RHSA-2011:0007",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2011-0007.html"
          },
          {
            "name": "70377",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/70377"
          },
          {
            "name": "RHSA-2011:0028",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2011-0028.html"
          },
          {
            "name": "45676",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/45676"
          },
          {
            "name": "[oss-security] 20110105 CVE-2010-4525 kvm: x86: zero kvm_vcpu_events-\u003einterrupt.pad infoleak",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2011/01/05/1"
          },
          {
            "name": "[oss-security] 20110106 Re: CVE-2010-4525 kvm: x86: zero kvm_vcpu_events-\u003einterrupt.pad infoleak",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2011/01/06/3"
          },
          {
            "name": "42890",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/42890"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-4525"
          },
          {
            "name": "ADV-2011-0123",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2011/0123"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2011-01-05T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Linux kernel 2.6.33 and 2.6.34.y does not initialize the kvm_vcpu_events-\u003einterrupt.pad structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via unspecified vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-08-16T14:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "kernel-kvmvcpueventsinterrupt-info-disc(64519)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/64519"
        },
        {
          "name": "[oss-security] 20110105 Re: CVE-2010-4525 kvm: x86: zero kvm_vcpu_events-\u003einterrupt.pad infoleak",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2011/01/05/9"
        },
        {
          "name": "RHSA-2011:0007",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2011-0007.html"
        },
        {
          "name": "70377",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/70377"
        },
        {
          "name": "RHSA-2011:0028",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2011-0028.html"
        },
        {
          "name": "45676",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/45676"
        },
        {
          "name": "[oss-security] 20110105 CVE-2010-4525 kvm: x86: zero kvm_vcpu_events-\u003einterrupt.pad infoleak",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2011/01/05/1"
        },
        {
          "name": "[oss-security] 20110106 Re: CVE-2010-4525 kvm: x86: zero kvm_vcpu_events-\u003einterrupt.pad infoleak",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2011/01/06/3"
        },
        {
          "name": "42890",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/42890"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-4525"
        },
        {
          "name": "ADV-2011-0123",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2011/0123"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2010-4525",
    "datePublished": "2011-01-11T01:00:00.000Z",
    "dateReserved": "2010-12-09T00:00:00.000Z",
    "dateUpdated": "2024-08-07T03:51:17.033Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted