REDHAT-BUG-716825: Infoleak
/proc/PID/io may be used for gathering private information. E.g. for openssh and vsftpd daemons wchars/rchars may be used to learn the precise password length.
[0/2] restrict statistics information to user https://lkml.org/lkml/2011/6/24/88 [1/2] proc: restrict access to /proc/PID/io (CVE-2011-2495) https://patchwork.kernel.org/patch/916032/ [2/2] taskstats: restrict access to user (CVE-2011-2494) https://patchwork.kernel.org/patch/916042/
taskstats authorizedkeys presence infoleak PoC http://seclists.org/oss-sec/2011/q2/659
Acknowledgements:
Red Hat would like to thank Vasiliy Kulikov of Openwall for reporting this issue.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-716825?
The vulnerability REDHAT-BUG-716825 is considered moderate as it may expose sensitive information regarding password lengths through the /proc/PID/io interface.
How do I fix REDHAT-BUG-716825?
To mitigate REDHAT-BUG-716825, restrict access to the /proc/PID/io statistics to the corresponding user or apply patches provided by your software vendor.
Which software is affected by REDHAT-BUG-716825?
The software affected by REDHAT-BUG-716825 includes OpenSSH and vsftpd.
Can REDHAT-BUG-716825 lead to further attacks?
Yes, the information exposed by REDHAT-BUG-716825 can potentially be used in targeted attacks, especially if an attacker can determine password lengths.
Is there a patch available for REDHAT-BUG-716825?
Yes, a patch is available from Red Hat to address the issues posed by REDHAT-BUG-716825.