2.1

CVE-2012-6536

net/xfrm/xfrm_user.c in the Linux kernel before 3.6 does not verify that the actual Netlink message length is consistent with a certain header field, which allows local users to obtain sensitive information from kernel heap memory by leveraging the CAP_NET_ADMIN capability and providing a (1) new or (2) updated state.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version <= 3.5.7
Linux ≫ Linux Kernel Version 3.0 Update rc1
Linux ≫ Linux Kernel Version 3.0 Update rc2
Linux ≫ Linux Kernel Version 3.0 Update rc3
Linux ≫ Linux Kernel Version 3.0 Update rc4
Linux ≫ Linux Kernel Version 3.0 Update rc5
Linux ≫ Linux Kernel Version 3.0 Update rc6
Linux ≫ Linux Kernel Version 3.0 Update rc7
Linux ≫ Linux Kernel Version 3.0.1
Linux ≫ Linux Kernel Version 3.0.2
Linux ≫ Linux Kernel Version 3.0.3
Linux ≫ Linux Kernel Version 3.0.4
Linux ≫ Linux Kernel Version 3.0.5
Linux ≫ Linux Kernel Version 3.0.6
Linux ≫ Linux Kernel Version 3.0.7
Linux ≫ Linux Kernel Version 3.0.8
Linux ≫ Linux Kernel Version 3.0.9
Linux ≫ Linux Kernel Version 3.0.10
Linux ≫ Linux Kernel Version 3.0.11
Linux ≫ Linux Kernel Version 3.0.12
Linux ≫ Linux Kernel Version 3.0.13
Linux ≫ Linux Kernel Version 3.0.14
Linux ≫ Linux Kernel Version 3.0.15
Linux ≫ Linux Kernel Version 3.0.16
Linux ≫ Linux Kernel Version 3.0.17
Linux ≫ Linux Kernel Version 3.0.18
Linux ≫ Linux Kernel Version 3.0.19
Linux ≫ Linux Kernel Version 3.0.20
Linux ≫ Linux Kernel Version 3.0.21
Linux ≫ Linux Kernel Version 3.0.22
Linux ≫ Linux Kernel Version 3.0.23
Linux ≫ Linux Kernel Version 3.0.24
Linux ≫ Linux Kernel Version 3.0.25
Linux ≫ Linux Kernel Version 3.0.26
Linux ≫ Linux Kernel Version 3.0.27
Linux ≫ Linux Kernel Version 3.0.28
Linux ≫ Linux Kernel Version 3.0.29
Linux ≫ Linux Kernel Version 3.0.30
Linux ≫ Linux Kernel Version 3.0.31
Linux ≫ Linux Kernel Version 3.0.32
Linux ≫ Linux Kernel Version 3.0.33
Linux ≫ Linux Kernel Version 3.0.34
Linux ≫ Linux Kernel Version 3.0.35
Linux ≫ Linux Kernel Version 3.0.36
Linux ≫ Linux Kernel Version 3.0.37
Linux ≫ Linux Kernel Version 3.0.38
Linux ≫ Linux Kernel Version 3.0.39
Linux ≫ Linux Kernel Version 3.0.40
Linux ≫ Linux Kernel Version 3.0.41
Linux ≫ Linux Kernel Version 3.0.42
Linux ≫ Linux Kernel Version 3.0.43
Linux ≫ Linux Kernel Version 3.0.44
Linux ≫ Linux Kernel Version 3.0.45
Linux ≫ Linux Kernel Version 3.0.46
Linux ≫ Linux Kernel Version 3.0.47
Linux ≫ Linux Kernel Version 3.0.48
Linux ≫ Linux Kernel Version 3.0.49
Linux ≫ Linux Kernel Version 3.0.50
Linux ≫ Linux Kernel Version 3.0.51
Linux ≫ Linux Kernel Version 3.0.52
Linux ≫ Linux Kernel Version 3.0.53
Linux ≫ Linux Kernel Version 3.0.54
Linux ≫ Linux Kernel Version 3.0.55
Linux ≫ Linux Kernel Version 3.0.56
Linux ≫ Linux Kernel Version 3.0.57
Linux ≫ Linux Kernel Version 3.0.58
Linux ≫ Linux Kernel Version 3.0.59
Linux ≫ Linux Kernel Version 3.0.60
Linux ≫ Linux Kernel Version 3.0.61
Linux ≫ Linux Kernel Version 3.0.62
Linux ≫ Linux Kernel Version 3.0.63
Linux ≫ Linux Kernel Version 3.0.64
Linux ≫ Linux Kernel Version 3.0.65
Linux ≫ Linux Kernel Version 3.0.66
Linux ≫ Linux Kernel Version 3.0.67
Linux ≫ Linux Kernel Version 3.0.68
Linux ≫ Linux Kernel Version 3.1
Linux ≫ Linux Kernel Version 3.1 Update rc1
Linux ≫ Linux Kernel Version 3.1 Update rc2
Linux ≫ Linux Kernel Version 3.1 Update rc3
Linux ≫ Linux Kernel Version 3.1 Update rc4
Linux ≫ Linux Kernel Version 3.1.1
Linux ≫ Linux Kernel Version 3.1.2
Linux ≫ Linux Kernel Version 3.1.3
Linux ≫ Linux Kernel Version 3.1.4
Linux ≫ Linux Kernel Version 3.1.5
Linux ≫ Linux Kernel Version 3.1.6
Linux ≫ Linux Kernel Version 3.1.7
Linux ≫ Linux Kernel Version 3.1.8
Linux ≫ Linux Kernel Version 3.1.9
Linux ≫ Linux Kernel Version 3.1.10
Linux ≫ Linux Kernel Version 3.2
Linux ≫ Linux Kernel Version 3.2 Update rc2
Linux ≫ Linux Kernel Version 3.2 Update rc3
Linux ≫ Linux Kernel Version 3.2 Update rc4
Linux ≫ Linux Kernel Version 3.2 Update rc5
Linux ≫ Linux Kernel Version 3.2 Update rc6
Linux ≫ Linux Kernel Version 3.2 Update rc7
Linux ≫ Linux Kernel Version 3.2.1
Linux ≫ Linux Kernel Version 3.2.2
Linux ≫ Linux Kernel Version 3.2.3
Linux ≫ Linux Kernel Version 3.2.4
Linux ≫ Linux Kernel Version 3.2.5
Linux ≫ Linux Kernel Version 3.2.6
Linux ≫ Linux Kernel Version 3.2.7
Linux ≫ Linux Kernel Version 3.2.8
Linux ≫ Linux Kernel Version 3.2.9
Linux ≫ Linux Kernel Version 3.2.10
Linux ≫ Linux Kernel Version 3.2.11
Linux ≫ Linux Kernel Version 3.2.12
Linux ≫ Linux Kernel Version 3.2.13
Linux ≫ Linux Kernel Version 3.2.14
Linux ≫ Linux Kernel Version 3.2.15
Linux ≫ Linux Kernel Version 3.2.16
Linux ≫ Linux Kernel Version 3.2.17
Linux ≫ Linux Kernel Version 3.2.18
Linux ≫ Linux Kernel Version 3.2.19
Linux ≫ Linux Kernel Version 3.2.20
Linux ≫ Linux Kernel Version 3.2.21
Linux ≫ Linux Kernel Version 3.2.22
Linux ≫ Linux Kernel Version 3.2.23
Linux ≫ Linux Kernel Version 3.2.24
Linux ≫ Linux Kernel Version 3.2.25
Linux ≫ Linux Kernel Version 3.2.26
Linux ≫ Linux Kernel Version 3.2.27
Linux ≫ Linux Kernel Version 3.2.28
Linux ≫ Linux Kernel Version 3.2.29
Linux ≫ Linux Kernel Version 3.2.30
Linux ≫ Linux Kernel Version 3.3
Linux ≫ Linux Kernel Version 3.3 Update rc1
Linux ≫ Linux Kernel Version 3.3 Update rc2
Linux ≫ Linux Kernel Version 3.3 Update rc3
Linux ≫ Linux Kernel Version 3.3 Update rc4
Linux ≫ Linux Kernel Version 3.3 Update rc5
Linux ≫ Linux Kernel Version 3.3 Update rc6
Linux ≫ Linux Kernel Version 3.3 Update rc7
Linux ≫ Linux Kernel Version 3.3.1
Linux ≫ Linux Kernel Version 3.3.2
Linux ≫ Linux Kernel Version 3.3.3
Linux ≫ Linux Kernel Version 3.3.4
Linux ≫ Linux Kernel Version 3.3.5
Linux ≫ Linux Kernel Version 3.3.6
Linux ≫ Linux Kernel Version 3.3.7
Linux ≫ Linux Kernel Version 3.3.8
Linux ≫ Linux Kernel Version 3.4
Linux ≫ Linux Kernel Version 3.4 Update rc1
Linux ≫ Linux Kernel Version 3.4 Update rc2
Linux ≫ Linux Kernel Version 3.4 Update rc3
Linux ≫ Linux Kernel Version 3.4 Update rc4
Linux ≫ Linux Kernel Version 3.4 Update rc5
Linux ≫ Linux Kernel Version 3.4 Update rc6
Linux ≫ Linux Kernel Version 3.4 Update rc7
Linux ≫ Linux Kernel Version 3.4.1
Linux ≫ Linux Kernel Version 3.4.2
Linux ≫ Linux Kernel Version 3.4.3
Linux ≫ Linux Kernel Version 3.4.4
Linux ≫ Linux Kernel Version 3.4.5
Linux ≫ Linux Kernel Version 3.4.6
Linux ≫ Linux Kernel Version 3.4.7
Linux ≫ Linux Kernel Version 3.4.8
Linux ≫ Linux Kernel Version 3.4.9
Linux ≫ Linux Kernel Version 3.4.10
Linux ≫ Linux Kernel Version 3.4.11
Linux ≫ Linux Kernel Version 3.4.12
Linux ≫ Linux Kernel Version 3.4.13
Linux ≫ Linux Kernel Version 3.4.14
Linux ≫ Linux Kernel Version 3.4.15
Linux ≫ Linux Kernel Version 3.4.16
Linux ≫ Linux Kernel Version 3.4.17
Linux ≫ Linux Kernel Version 3.4.18
Linux ≫ Linux Kernel Version 3.4.19
Linux ≫ Linux Kernel Version 3.4.20
Linux ≫ Linux Kernel Version 3.4.21
Linux ≫ Linux Kernel Version 3.4.22
Linux ≫ Linux Kernel Version 3.4.23
Linux ≫ Linux Kernel Version 3.4.24
Linux ≫ Linux Kernel Version 3.4.25
Linux ≫ Linux Kernel Version 3.4.26
Linux ≫ Linux Kernel Version 3.4.27
Linux ≫ Linux Kernel Version 3.4.28
Linux ≫ Linux Kernel Version 3.4.29
Linux ≫ Linux Kernel Version 3.4.30
Linux ≫ Linux Kernel Version 3.4.31
Linux ≫ Linux Kernel Version 3.4.32
Linux ≫ Linux Kernel Version 3.5.1
Linux ≫ Linux Kernel Version 3.5.2
Linux ≫ Linux Kernel Version 3.5.3
Linux ≫ Linux Kernel Version 3.5.4
Linux ≫ Linux Kernel Version 3.5.5
Linux ≫ Linux Kernel Version 3.5.6
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.37% 0.286
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:P/I:N/A:N
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ecd7918745234e423dd87fcc0c077da557909720
http://www.openwall.com/lists/oss-security/2013/03/05/13
https://github.com/torvalds/linux/commit/ecd7918745234e423dd87fcc0c077da557909720
https://www.kernel.org/pub/linux/kernel/v3.x/patch-3.6.bz2
Patch