{
  "threat_severity" : "Moderate",
  "public_date" : "2010-08-17T00:00:00Z",
  "bugzilla" : {
    "description" : "kernel: drm ioctls infoleak",
    "id" : "621435",
    "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=621435"
  },
  "cvss" : {
    "cvss_base_score" : "1.9",
    "cvss_scoring_vector" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
    "status" : "verified"
  },
  "details" : [ "The drm_ioctl function in drivers/gpu/drm/drm_drv.c in the Direct Rendering Manager (DRM) subsystem in the Linux kernel before 2.6.27.53, 2.6.32.x before 2.6.32.21, 2.6.34.x before 2.6.34.6, and 2.6.35.x before 2.6.35.4 allows local users to obtain potentially sensitive information from kernel memory by requesting a large memory-allocation amount." ],
  "statement" : "This issue did not affect the version of Linux kernel as shipped with Red Hat\nEnterprise Linux 3, 4, 5 and Red Hat Enterprise MRG as they did not include\nsupport for GPU DRM.",
  "acknowledgement" : "Red Hat would like to thank Kees Cook for reporting this issue.",
  "affected_release" : [ {
    "product_name" : "Red Hat Enterprise Linux 6",
    "release_date" : "2010-11-10T00:00:00Z",
    "advisory" : "RHSA-2010:0842",
    "cpe" : "cpe:/o:redhat:enterprise_linux:6",
    "package" : "kernel-0:2.6.32-71.7.1.el6"
  } ],
  "references" : [ "https://www.cve.org/CVERecord?id=CVE-2010-2803\nhttps://nvd.nist.gov/vuln/detail/CVE-2010-2803" ],
  "name" : "CVE-2010-2803",
  "csaw" : false
}