HOME VULNERABILITIESCVE-2010-2942

MEDIUM

CVE-2010-2942

CWE-401Published: September 21, 2010· Updated: Jun 16, 2026

5.5

CVSS v3.1

Official Description

The actions implementation in the network queueing functionality in the Linux kernel before 2.6.36-rc2 does not properly initialize certain structure members when performing dump operations, which allows local users to obtain potentially sensitive information from kernel memory via vectors related to (1) the tcf_gact_dump function in net/sched/act_gact.c, (2) the tcf_mirred_dump function in net/sched/act_mirred.c, (3) the tcf_nat_dump function in net/sched/act_nat.c, (4) the tcf_simp_dump function in net/sched/act_simple.c, and (5) the tcf_skbedit_dump function in net/sched/act_skbedit.c.

Technical Analysis

CVE-2010-2942 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation requires low privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

A successful exploit results in complete confidentiality breach (data exposure), with a CVSS base score of 5.5.

CVSS v3.1 Vector Breakdown

Exploitability

Attack VectorLocal

Attack ComplexityLow

Privileges Req.Low

User InteractionNone

ScopeUnchanged

Impact

ConfidentialityHigh

IntegrityNone

AvailabilityNone

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected Vendors & Products

avaya7 product(s)

aura communication manageraura presence servicesaura session manageraura system manageraura system platformiqvoice portal

Canonical1 product(s)

ubuntu linux

Linux1 product(s)

linux kernel

openSUSE1 product(s)

opensuse

SUSE2 product(s)

suse linux enterprise desktopsuse linux enterprise server

VMware1 product(s)

esx

Source: NVD CPE · 33 total CPE entries

Exploit & PoC Resources

NO KNOWN EXPLOITNo public exploit confirmed at this time

Offensive Security exploit database

GitHub PoC Search

Community PoC repositories

Rapid7 / Metasploit

Metasploit module search

Security advisories & exploits

Official NIST entry

CVE Program entry

External links open in a new tab. Always verify in a controlled environment before use.

Official Patches & Advisories

PATCHhttp://patchwork.ozlabs.org/patch/61857/

PATCHhttp://www.openwall.com/lists/oss-security/2010/08/18/1

PATCHhttp://www.openwall.com/lists/oss-security/2010/08/19/4

PATCHhttps://bugzilla.redhat.com/show_bug.cgi?id=624903

PATCHhttp://patchwork.ozlabs.org/patch/61857/

PATCHhttp://www.openwall.com/lists/oss-security/2010/08/18/1

PATCHhttp://www.openwall.com/lists/oss-security/2010/08/19/4

PATCHhttps://bugzilla.redhat.com/show_bug.cgi?id=624903

ADVISORYhttp://lists.opensuse.org/opensuse-security-announce/2010-09/msg00004.html

ADVISORYhttp://lists.opensuse.org/opensuse-security-announce/2010-09/msg00005.html

ADVISORYhttp://lists.opensuse.org/opensuse-security-announce/2010-11/msg00000.html

ADVISORYhttp://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.html

ADVISORYhttp://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html

ADVISORYhttp://support.avaya.com/css/P8/documents/100113326

ADVISORYhttp://www.securityfocus.com/archive/1/520102/100/0/threaded

ADVISORYhttp://www.securityfocus.com/bid/42529

ADVISORYhttp://www.ubuntu.com/usn/USN-1000-1

ADVISORYhttp://www.vmware.com/security/advisories/VMSA-2011-0012.html

ADVISORYhttp://lists.opensuse.org/opensuse-security-announce/2010-09/msg00004.html

ADVISORYhttp://lists.opensuse.org/opensuse-security-announce/2010-09/msg00005.html

ADVISORYhttp://lists.opensuse.org/opensuse-security-announce/2010-11/msg00000.html

ADVISORYhttp://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.html

ADVISORYhttp://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html

ADVISORYhttp://support.avaya.com/css/P8/documents/100113326

ADVISORYhttp://www.securityfocus.com/archive/1/520102/100/0/threaded

ADVISORYhttp://www.securityfocus.com/bid/42529

ADVISORYhttp://www.ubuntu.com/usn/USN-1000-1

ADVISORYhttp://www.vmware.com/security/advisories/VMSA-2011-0012.html

All References (46)

→

http://git.kernel.org/?p=linux/kernel/git/davem/net-2.6.git%3Ba=commit%3Bh=1c40be12f7d8ca1d387510d39787b12e512a7ce8

→

http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00004.htmlMailing List · Third Party Advisory

→

http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00005.htmlMailing List · Third Party Advisory

→

http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00000.htmlMailing List · Third Party Advisory

→

http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.htmlMailing List · Third Party Advisory

→

http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.htmlMailing List · Third Party Advisory

→

http://patchwork.ozlabs.org/patch/61857/Mailing List · Patch · Third Party Advisory

→

http://secunia.com/advisories/41512Broken Link

→

http://secunia.com/advisories/46397Broken Link

→

http://support.avaya.com/css/P8/documents/100113326Third Party Advisory

→

http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.36-rc2Broken Link

→

http://www.openwall.com/lists/oss-security/2010/08/18/1Mailing List · Patch · Third Party Advisory

→

http://www.openwall.com/lists/oss-security/2010/08/19/4Mailing List · Patch · Third Party Advisory

→

http://www.redhat.com/support/errata/RHSA-2010-0723.htmlBroken Link

→

http://www.redhat.com/support/errata/RHSA-2010-0771.htmlBroken Link

Quick Facts

CVE IDCVE-2010-2942

CVSS Score5.5 / 10

SeverityMEDIUM

WeaknessCWE-401

CISA KEVNo

Affected6 vendor(s)

PublishedSep 21, 2010

Related CVEs (CWE-401)

Recommended Actions

→Apply vendor patches immediately
→Monitor CVE-2010-2942 in threat intel feeds
→Review IDS/IPS signatures for exploitation attempts

Data sourced from NVD (NIST), CISA KEV, and EPSS (FIRST). Analysis generated by CTIWATCH.COM. CVE data is provided under the NVD usage policy.

← All Vulnerabilities·Search for CVE-2010-2942·NVD