Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2007-4571

Date: September 26, 2007

The snd_mem_proc_read function in sound/core/memalloc.c in the Advanced Linux Sound Architecture (ALSA) in the Linux kernel before 2.6.22.8 does not return the correct write size, which allows local users to obtain sensitive information (kernel memory contents) via a small count argument, as demonstrated by multiple reads of /proc/driver/snd-page-alloc.

Severity Score

Related Resources (33)

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ccec6e2c4a74adf76ed4e2478091a311b1806212
http://www.redhat.com/support/errata/RHSA-2007-0993.html
http://support.avaya.com/elmodocs2/security/ASA-2007-474.htm
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9053
http://www.securityfocus.com/bid/25807
https://issues.rpath.com/browse/RPL-1761
http://secunia.com/advisories/26989
https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00083.html
http://secunia.com/advisories/28626
https://people.canonical.com/~ubuntu-security/cve/CVE-2007-4571
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=600
http://secunia.com/advisories/26980
https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00436.html
http://secunia.com/advisories/27436
http://www.ubuntu.com/usn/usn-618-1
http://www.debian.org/security/2008/dsa-1505
http://secunia.com/advisories/29054
https://exchange.xforce.ibmcloud.com/vulnerabilities/36780
http://www.vupen.com/english/advisories/2007/3272
http://www.securitytracker.com/id?1018734
http://secunia.com/advisories/26918
https://access.redhat.com/security/cve/CVE-2007-4571
http://secunia.com/advisories/27747
http://www.debian.org/security/2008/dsa-1479
http://secunia.com/advisories/27824
http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.8
http://secunia.com/advisories/30769
https://nvd.nist.gov/vuln/detail/CVE-2007-4571
http://www.novell.com/linux/security/advisories/2007_53_kernel.html
http://www.redhat.com/support/errata/RHSA-2007-0939.html
http://secunia.com/advisories/27101
http://secunia.com/advisories/27227
https://www.mend.io/vulnerability-database/CVE-2007-4571

Severity Score

CVSS v3.1

Base Score:
Attack Vector (AV): LOCAL
Attack Complexity (AC): LOW
Privileges Required (PR): NONE
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): LOW
Integrity (I): NONE
Availability (A): NONE

CVSS v2

Base Score:
Access Vector (AV): LOCAL
Access Complexity (AC): LOW
Authentication (AU): NONE
Confidentiality (C): PARTIAL
Integrity (I): NONE
Availability (A): NONE
Additional information:

Do you need more information?

Contact Us