CVE-2011-1162
Priority
Low
Description
The tpm_read function in the Linux kernel 2.6 does not properly clear
memory, which might allow local users to read the results of the previous
TPM command.
memory, which might allow local users to read the results of the previous
TPM command.
Ubuntu-Description
Peter Huewe discovered an information leak in the handling of reading
security-related TPM data. A local, unprivileged user could read the
results of a previous TPM command.
security-related TPM data. A local, unprivileged user could read the
results of a previous TPM command.
References
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1162
https://rhn.redhat.com/errata/RHSA-2011-1465.html
http://www.ubuntu.com/usn/usn-1260-1
http://www.ubuntu.com/usn/usn-1275-1
http://www.ubuntu.com/usn/usn-1294-1
http://www.ubuntu.com/usn/usn-1303-1
http://www.ubuntu.com/usn/usn-1299-1
http://www.ubuntu.com/usn/usn-1311-1
http://www.ubuntu.com/usn/usn-1318-1
http://www.ubuntu.com/usn/usn-1319-1
http://www.ubuntu.com/usn/usn-1323-1
http://www.ubuntu.com/usn/usn-1325-1
http://www.ubuntu.com/usn/usn-1332-1
http://www.ubuntu.com/usn/usn-1337-1
http://www.ubuntu.com/usn/usn-1341-1
http://www.ubuntu.com/usn/usn-1345-1
https://rhn.redhat.com/errata/RHSA-2011-1465.html
http://www.ubuntu.com/usn/usn-1260-1
http://www.ubuntu.com/usn/usn-1275-1
http://www.ubuntu.com/usn/usn-1294-1
http://www.ubuntu.com/usn/usn-1303-1
http://www.ubuntu.com/usn/usn-1299-1
http://www.ubuntu.com/usn/usn-1311-1
http://www.ubuntu.com/usn/usn-1318-1
http://www.ubuntu.com/usn/usn-1319-1
http://www.ubuntu.com/usn/usn-1323-1
http://www.ubuntu.com/usn/usn-1325-1
http://www.ubuntu.com/usn/usn-1332-1
http://www.ubuntu.com/usn/usn-1337-1
http://www.ubuntu.com/usn/usn-1341-1
http://www.ubuntu.com/usn/usn-1345-1
Package
| Upstream: | released (3.1~rc8) |
| Ubuntu 8.04 LTS (Hardy Heron): | DNE |
| Ubuntu 10.04 LTS (Lucid Lynx): | released (2.6.32-341.41) |
| Ubuntu 10.10 (Maverick Meerkat): | ignored (binary supplied by "linux" now) |
| Ubuntu 11.04 (Natty Narwhal): | DNE |
| Ubuntu 11.10 (Oneiric Ocelot): | DNE |
| Ubuntu 12.04 LTS (Precise Pangolin): | DNE |
Package
| Upstream: | released (3.1~rc8) |
| Ubuntu 8.04 LTS (Hardy Heron): | DNE |
| Ubuntu 10.04 LTS (Lucid Lynx): | released (3.0.0-13.21~lucid1) |
| Ubuntu 10.10 (Maverick Meerkat): | DNE |
| Ubuntu 11.04 (Natty Narwhal): | DNE |
| Ubuntu 11.10 (Oneiric Ocelot): | DNE |
| Ubuntu 12.04 LTS (Precise Pangolin): | DNE |
Package
| Upstream: | released (3.1~rc8) |
| Ubuntu 8.04 LTS (Hardy Heron): | DNE |
| Ubuntu 10.04 LTS (Lucid Lynx): | released (2.6.38-13.54~lucid1) |
| Ubuntu 10.10 (Maverick Meerkat): | DNE |
| Ubuntu 11.04 (Natty Narwhal): | DNE |
| Ubuntu 11.10 (Oneiric Ocelot): | DNE |
| Ubuntu 12.04 LTS (Precise Pangolin): | DNE |
Package
| Upstream: | released (3.1~rc8) |
| Ubuntu 8.04 LTS (Hardy Heron): | DNE |
| Ubuntu 10.04 LTS (Lucid Lynx): | pending (2.6.32-221.39) |
| Ubuntu 10.10 (Maverick Meerkat): | released (2.6.32-421.39) |
| Ubuntu 11.04 (Natty Narwhal): | DNE |
| Ubuntu 11.10 (Oneiric Ocelot): | DNE |
| Ubuntu 12.04 LTS (Precise Pangolin): | DNE |
Package
| Upstream: | released (3.1~rc8) |
| Ubuntu 8.04 LTS (Hardy Heron): | DNE |
| Ubuntu 10.04 LTS (Lucid Lynx): | released (2.6.35-32.64~lucid1) |
| Ubuntu 10.10 (Maverick Meerkat): | DNE |
| Ubuntu 11.04 (Natty Narwhal): | DNE |
| Ubuntu 11.10 (Oneiric Ocelot): | DNE |
| Ubuntu 12.04 LTS (Precise Pangolin): | DNE |
Package
| Upstream: | released (3.1~rc8) |
| Ubuntu 8.04 LTS (Hardy Heron): | released (2.6.24-30.98) |
| Ubuntu 10.04 LTS (Lucid Lynx): | released (2.6.32-37.80) |
| Ubuntu 10.10 (Maverick Meerkat): | released (2.6.35-32.64) |
| Ubuntu 11.04 (Natty Narwhal): | released (2.6.38-13.54) |
| Ubuntu 11.10 (Oneiric Ocelot): | released (3.0.0-13.21) |
| Ubuntu 12.04 LTS (Precise Pangolin): | not-affected (3.1.0-1.1) |
Patches:
| Introduced by 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 | Fixed by 3321c07ae5068568cd61ac9f4ba749006a7185c9 |
Package
| Upstream: | released (3.1~rc8) |
| Ubuntu 8.04 LTS (Hardy Heron): | DNE |
| Ubuntu 10.04 LTS (Lucid Lynx): | DNE |
| Ubuntu 10.10 (Maverick Meerkat): | released (2.6.35-903.29) |
| Ubuntu 11.04 (Natty Narwhal): | released (2.6.38-1209.19) |
| Ubuntu 11.10 (Oneiric Ocelot): | released (3.0.0-1206.11) |
| Ubuntu 12.04 LTS (Precise Pangolin): | not-affected (3.0.0-1400.1) |
Package
| Upstream: | released (3.1~rc8) |
| Ubuntu 8.04 LTS (Hardy Heron): | DNE |
| Ubuntu 10.04 LTS (Lucid Lynx): | released (2.6.31-612.32) |
| Ubuntu 10.10 (Maverick Meerkat): | DNE |
| Ubuntu 11.04 (Natty Narwhal): | DNE |
| Ubuntu 11.10 (Oneiric Ocelot): | DNE |
| Ubuntu 12.04 LTS (Precise Pangolin): | DNE |