PT-2013-3830

CVE-2013-2547

Published

2013-03-14

Updated

2021-07-15

Description by

CVSS 2.0

2.1

Low

MetricsAV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.8.3

Description The issue concerns the crypto report one function in the Linux kernel, which fails to initialize certain structure members. This allows local users with the CAP NET ADMIN capability to obtain sensitive information from kernel heap memory.

Recommendations For versions prior to 3.8.3, update to version 3.8.3 or later to resolve the issue.

Exploitability

Fix

Researchers

Mathias Krause

Vendors

Affected products

Weakness enumeration

CWE-310

Related identifiers

CVE-2013-2547

RHSA-2013:0829