CVE ID:	CVE-2007-4571
Description:	The snd_mem_proc_read function in sound/core/memalloc.c in the Advanced Linux Sound Architecture (ALSA) in the Linux kernel before 2.6.22.8 does not return the correct write size, which allows local users to obtain sensitive information (kernel memory contents) via a small count argument, as demonstrated by multiple reads of /proc/driver/snd-page-alloc.
Test IDs:	1.3.6.1.4.1.25623.1.0.861192   1.3.6.1.4.1.25623.1.1.1.1.2008.1479   1.3.6.1.4.1.25623.1.0.59610   1.3.6.1.4.1.25623.1.0.60439   1.3.6.1.4.1.25623.1.0.861149   1.3.6.1.4.1.25623.1.0.122628   1.3.6.1.4.1.25623.1.0.59808   1.3.6.1.4.1.25623.1.0.59271
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2007-4571 1018734 http://www.securitytracker.com/id?1018734 20070925 Linux Kernel ALSA snd_mem_proc_read Information Disclosure Vulnerability http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=600 25807 http://www.securityfocus.com/bid/25807 26918 http://secunia.com/advisories/26918 26980 http://secunia.com/advisories/26980 26989 http://secunia.com/advisories/26989 27101 http://secunia.com/advisories/27101 27227 http://secunia.com/advisories/27227 27436 http://secunia.com/advisories/27436 27747 http://secunia.com/advisories/27747 27824 http://secunia.com/advisories/27824 28626 http://secunia.com/advisories/28626 29054 http://secunia.com/advisories/29054 30769 http://secunia.com/advisories/30769 ADV-2007-3272 http://www.vupen.com/english/advisories/2007/3272 DSA-1479 http://www.debian.org/security/2008/dsa-1479 DSA-1505 http://www.debian.org/security/2008/dsa-1505 FEDORA-2007-2349 https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00436.html FEDORA-2007-714 https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00083.html RHSA-2007:0939 http://www.redhat.com/support/errata/RHSA-2007-0939.html RHSA-2007:0993 http://www.redhat.com/support/errata/RHSA-2007-0993.html SUSE-SA:2007:053 http://www.novell.com/linux/security/advisories/2007_53_kernel.html USN-618-1 http://www.ubuntu.com/usn/usn-618-1 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ccec6e2c4a74adf76ed4e2478091a311b1806212 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ccec6e2c4a74adf76ed4e2478091a311b1806212 http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.8 http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.8 http://support.avaya.com/elmodocs2/security/ASA-2007-474.htm http://support.avaya.com/elmodocs2/security/ASA-2007-474.htm https://issues.rpath.com/browse/RPL-1761 https://issues.rpath.com/browse/RPL-1761 linux-sndpagealloc-information-disclosure(36780) https://exchange.xforce.ibmcloud.com/vulnerabilities/36780 oval:org.mitre.oval:def:9053 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9053