CVE-2010-2942 Information disclosure in n/a

What is CVE-2010-2942?

CVE-2010-2942 is a medium-severity vulnerability in Canonical Ubuntu Linux, published on 21 Sep 2010. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

The actions implementation in the network queueing functionality in the Linux kernel before 2.6.36-rc2 does not properly initialize certain structure members when performing dump operations, which allows local users to obtain potentially sensitive information from kernel memory via vectors related to (1) the tcf_gact_dump function in net/sched/act_gact.c, (2) the tcf_mirred_dump function in net/sched/act_mirred.c, (3) the tcf_nat_dump function in net/sched/act_nat.c, (4) the tcf_simp_dump function in net/sched/act_simple.c, and (5) the tcf_skbedit_dump function in net/sched/act_skbedit.c.

Weakness: CWE-401

Which versions are affected by CVE-2010-2942?

It affects 13 products.

Products include Avaya Aura Communication Manager, Avaya Aura Presence Services, Avaya Aura Session Manager, Avaya Aura System Manager, Avaya Aura System Platform, Avaya Iq and 7 more.

How do I fix CVE-2010-2942?

Apply the vendor's patch.

Is CVE-2010-2942 being exploited?

There is no known exploitation of CVE-2010-2942 in the wild and no public exploit code.

Other vulnerabilities in Canonical Ubuntu Linux

• CVE-2010-2943 Information disclosure in n/a High 8.1
• CVE-2010-2492 Memory corruption in n/a High 7.8
• CVE-2010-2798 Null dereference in n/a High 7.8
• CVE-2022-2249 Avaya Aura Communication Manager Privilege Escalation Vulnerabilities High 7.7
• CVE-2018-15617 Communication Manager Denial of Service Medium 6.5

All Canonical Ubuntu Linux vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-57r8-mcj9-q86m.