Total vulnerabilities in the database
The rds_inc_info_copy function in net/rds/recv.c in the Linux kernel through 4.6.3 does not initialize a certain structure member, which allows remote attackers to obtain sensitive information from kernel stack memory by reading an RDS message.
| Software | From | Fixed in |
|---|---|---|
| fedoraproject / fedora | 23 | 23.x |
| suse / linux_enterprise_real_time_extension | 11-sp4 | 11-sp4.x |
| fedoraproject / fedora | 24 | 24.x |
| suse / linux_enterprise_debuginfo | 11-sp4 | 11-sp4.x |
| suse / linux_enterprise_real_time_extension | 12-sp1 | 12-sp1.x |
| suse / linux_enterprise_server | 11-extra | 11-extra.x |
| redhat / enterprise_linux | 6.0 | 6.0.x |
| suse / suse_linux_enterprise_software_development_kit | 11-sp4 | 11-sp4.x |
| suse / linux_enterprise_workstation_extension | 12 | 12.x |
| redhat / enterprise_linux | 5 | 5.x |
| suse / linux_enterprise_desktop | 12 | 12.x |
| suse / opensuse_leap | 42.1 | 42.1.x |
| suse / linux_enterprise_server | 11-sp4 | 11-sp4.x |
| suse / suse_linux_enterprise_software_development_kit | 12 | 12.x |
| fedoraproject / fedora | 22 | 22.x |
| linux / linux_kernel | - | 4.6.3.x |
| suse / suse_linux_enterprise_server | 12 | 12.x |