CVE-2011-0710

LowCVSS 2.1/10Last modified Jun 16, 2026

Description

The task_show_regs function in arch/s390/kernel/traps.c in the Linux kernel before 2.6.38-rc4-next-20110216 on the s390 platform allows local users to obtain the values of the registers of an arbitrary process by reading a status file under /proc/.

Metrics

CVSS 2.0 2.1/10AV:L/AC:L/Au:N/C:P/I:N/A:N

Weakness enumeration

CWE-200

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=261cd298a8c363d7985e3482946edb4bfedacf98
http://openwall.com/lists/oss-security/2011/02/16/3Mailing List, Patch, Third Party Advisory
http://openwall.com/lists/oss-security/2011/02/16/9Mailing List, Patch, Third Party Advisory
http://secunia.com/advisories/46397Third Party Advisory
http://www.kernel.org/pub/linux/kernel/v2.6/next/patch-v2.6.38-rc4-next-20110216.bz2Broken Link
http://www.securityfocus.com/archive/1/520102/100/0/threadedThird Party Advisory, VDB Entry
http://www.securityfocus.com/bid/46421Third Party Advisory, VDB Entry
http://www.vmware.com/security/advisories/VMSA-2011-0012.htmlThird Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=677850Issue Tracking, Patch, Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/65464Third Party Advisory, VDB Entry
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=261cd298a8c363d7985e3482946edb4bfedacf98
http://openwall.com/lists/oss-security/2011/02/16/3Mailing List, Patch, Third Party Advisory
http://openwall.com/lists/oss-security/2011/02/16/9Mailing List, Patch, Third Party Advisory
http://secunia.com/advisories/46397Third Party Advisory
http://www.kernel.org/pub/linux/kernel/v2.6/next/patch-v2.6.38-rc4-next-20110216.bz2Broken Link
http://www.securityfocus.com/archive/1/520102/100/0/threadedThird Party Advisory, VDB Entry
http://www.securityfocus.com/bid/46421Third Party Advisory, VDB Entry
http://www.vmware.com/security/advisories/VMSA-2011-0012.htmlThird Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=677850Issue Tracking, Patch, Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/65464Third Party Advisory, VDB Entry

Timeline

Published: Feb 18, 2011
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2011

CVE-2011-07112.1The xfs_fs_geometry function in fs/xfs/xfs_fsops.c in the Linux kernel before 2.6.38-rc6-git3 does not initialize a certain structure member CVE-2011-07127.2Multiple buffer overflows in the caiaq Native Instruments USB audio functionality in the Linux kernel before 2.6.38-rc4-next-20110215 might CVE-2011-07136.8Heap-based buffer overflow in wiretap/dct3trace.c in Wireshark 1.2.0 through 1.2.14 and 1.4.0 through 1.4.3 allows remote attackers to cause CVE-2011-07145.7Use-after-free vulnerability in a certain Red Hat patch for the RPC server sockets functionality in the Linux kernel 2.6.32 on Red Hat Enter CVE-2011-07154.3The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.16, allows remote attackers to cause a den CVE-2011-07164.7The br_multicast_add_group function in net/bridge/br_multicast.c in the Linux kernel before 2.6.38, when a certain Ethernet bridge configura CVE-2011-07175.8Session fixation vulnerability in Red Hat Network (RHN) Satellite Server 5.4 allows remote attackers to hijack web sessions via unspecified CVE-2011-07185.8Red Hat Network (RHN) Satellite Server 5.4 does not use a time delay after a failed login attempt, which makes it easier for remote attacker CVE-2011-07195.0Samba 3.x before 3.3.15, 3.4.x before 3.4.12, and 3.5.x before 3.5.7 does not perform range checks for file descriptors before use of the FD CVE-2011-07207.5Unspecified vulnerability in Plone 2.5 through 4.0, as used in Conga, luci, and possibly other products, allows remote attackers to obtain a CVE-2011-07216.4Multiple CRLF injection vulnerabilities in (1) chfn and (2) chsh in shadow 1:4.1.4 allow local users to add new users or groups to /etc/pass CVE-2011-07226.8FFmpeg before 0.5.4, as used in MPlayer and other products, allows remote attackers to cause a denial of service (heap memory corruption and