PT-2013-4240

CVE-2013-3232

·

Published

2013-04-22

·

Updated

2017-11-29

Description by

CVSS 2.0
4.9
Medium
MetricsAV:L/AC:L/Au:N/C:C/I:N/A:N
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.9-rc7
Description The issue allows local users to obtain sensitive information from kernel stack memory. This is due to the nr recvmsg function in net/netrom/af netrom.c not initializing a certain data structure, which can be exploited via a crafted recvmsg or recvfrom system call.
Recommendations For Linux kernel versions prior to 3.9-rc7, update to version 3.9-rc7 or later to resolve the issue.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
USN-1837-1
USN-1849-1
USN-1876-1
USN-1877-1
USN-1878-1
USN-1879-1
USN-1880-1
USN-1881-1
USN-1882-1
USN-1883-1
Found an issue in the description? Have something to add? Feel free to write us 👾