CVE-2012-6538

EPSS 0.35%
Veröffentlicht 15.03.2013 20:55:07
Zuletzt bearbeitet 29.04.2026 01:13:23
Erkennungen
Login

The copy_to_user_auth function in net/xfrm/xfrm_user.c in the Linux kernel before 3.6 uses an incorrect C library function for copying a string, which allows local users to obtain sensitive information from kernel heap memory by leveraging the CAP_NET_ADMIN capability.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 8

NVD 191 VulnDex Vulnerability Enrichment 6

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Linux ≫ Linux Kernel Version <= 3.5.7

Linux ≫ Linux Kernel Version 3.0 Update rc1

Linux ≫ Linux Kernel Version 3.0 Update rc2

Linux ≫ Linux Kernel Version 3.0 Update rc3

Linux ≫ Linux Kernel Version 3.0 Update rc4

Linux ≫ Linux Kernel Version 3.0 Update rc5

Linux ≫ Linux Kernel Version 3.0 Update rc6

Linux ≫ Linux Kernel Version 3.0 Update rc7

Linux ≫ Linux Kernel Version 3.0.1

Linux ≫ Linux Kernel Version 3.0.2

Linux ≫ Linux Kernel Version 3.0.3

Linux ≫ Linux Kernel Version 3.0.4

Linux ≫ Linux Kernel Version 3.0.5

Linux ≫ Linux Kernel Version 3.0.6

Linux ≫ Linux Kernel Version 3.0.7

Linux ≫ Linux Kernel Version 3.0.8

Linux ≫ Linux Kernel Version 3.0.9

Linux ≫ Linux Kernel Version 3.0.10

Linux ≫ Linux Kernel Version 3.0.11

Linux ≫ Linux Kernel Version 3.0.12

Linux ≫ Linux Kernel Version 3.0.13

Linux ≫ Linux Kernel Version 3.0.14

Linux ≫ Linux Kernel Version 3.0.15

Linux ≫ Linux Kernel Version 3.0.16

Linux ≫ Linux Kernel Version 3.0.17

Linux ≫ Linux Kernel Version 3.0.18

Linux ≫ Linux Kernel Version 3.0.19

Linux ≫ Linux Kernel Version 3.0.20

Linux ≫ Linux Kernel Version 3.0.21

Linux ≫ Linux Kernel Version 3.0.22

Linux ≫ Linux Kernel Version 3.0.23

Linux ≫ Linux Kernel Version 3.0.24

Linux ≫ Linux Kernel Version 3.0.25

Linux ≫ Linux Kernel Version 3.0.26

Linux ≫ Linux Kernel Version 3.0.27

Linux ≫ Linux Kernel Version 3.0.28

Linux ≫ Linux Kernel Version 3.0.29

Linux ≫ Linux Kernel Version 3.0.30

Linux ≫ Linux Kernel Version 3.0.31

Linux ≫ Linux Kernel Version 3.0.32

Linux ≫ Linux Kernel Version 3.0.33

Linux ≫ Linux Kernel Version 3.0.34

Linux ≫ Linux Kernel Version 3.0.35

Linux ≫ Linux Kernel Version 3.0.36

Linux ≫ Linux Kernel Version 3.0.37

Linux ≫ Linux Kernel Version 3.0.38

Linux ≫ Linux Kernel Version 3.0.39

Linux ≫ Linux Kernel Version 3.0.40

Linux ≫ Linux Kernel Version 3.0.41

Linux ≫ Linux Kernel Version 3.0.42

Linux ≫ Linux Kernel Version 3.0.43

Linux ≫ Linux Kernel Version 3.0.44

Linux ≫ Linux Kernel Version 3.0.45

Linux ≫ Linux Kernel Version 3.0.46

Linux ≫ Linux Kernel Version 3.0.47

Linux ≫ Linux Kernel Version 3.0.48

Linux ≫ Linux Kernel Version 3.0.49

Linux ≫ Linux Kernel Version 3.0.50

Linux ≫ Linux Kernel Version 3.0.51

Linux ≫ Linux Kernel Version 3.0.52

Linux ≫ Linux Kernel Version 3.0.53

Linux ≫ Linux Kernel Version 3.0.54

Linux ≫ Linux Kernel Version 3.0.55

Linux ≫ Linux Kernel Version 3.0.56

Linux ≫ Linux Kernel Version 3.0.57

Linux ≫ Linux Kernel Version 3.0.58

Linux ≫ Linux Kernel Version 3.0.59

Linux ≫ Linux Kernel Version 3.0.60

Linux ≫ Linux Kernel Version 3.0.61

Linux ≫ Linux Kernel Version 3.0.62

Linux ≫ Linux Kernel Version 3.0.63

Linux ≫ Linux Kernel Version 3.0.64

Linux ≫ Linux Kernel Version 3.0.65

Linux ≫ Linux Kernel Version 3.0.66

Linux ≫ Linux Kernel Version 3.0.67

Linux ≫ Linux Kernel Version 3.0.68

Linux ≫ Linux Kernel Version 3.1

Linux ≫ Linux Kernel Version 3.1 Update rc1

Linux ≫ Linux Kernel Version 3.1 Update rc2

Linux ≫ Linux Kernel Version 3.1 Update rc3

Linux ≫ Linux Kernel Version 3.1 Update rc4

Linux ≫ Linux Kernel Version 3.1.1

Linux ≫ Linux Kernel Version 3.1.2

Linux ≫ Linux Kernel Version 3.1.3

Linux ≫ Linux Kernel Version 3.1.4

Linux ≫ Linux Kernel Version 3.1.5

Linux ≫ Linux Kernel Version 3.1.6

Linux ≫ Linux Kernel Version 3.1.7

Linux ≫ Linux Kernel Version 3.1.8

Linux ≫ Linux Kernel Version 3.1.9

Linux ≫ Linux Kernel Version 3.1.10

Linux ≫ Linux Kernel Version 3.2

Linux ≫ Linux Kernel Version 3.2 Update rc2

Linux ≫ Linux Kernel Version 3.2 Update rc3

Linux ≫ Linux Kernel Version 3.2 Update rc4

Linux ≫ Linux Kernel Version 3.2 Update rc5

Linux ≫ Linux Kernel Version 3.2 Update rc6

Linux ≫ Linux Kernel Version 3.2 Update rc7

Linux ≫ Linux Kernel Version 3.2.1

Linux ≫ Linux Kernel Version 3.2.2

Linux ≫ Linux Kernel Version 3.2.3

Linux ≫ Linux Kernel Version 3.2.4

Linux ≫ Linux Kernel Version 3.2.5

Linux ≫ Linux Kernel Version 3.2.6

Linux ≫ Linux Kernel Version 3.2.7

Linux ≫ Linux Kernel Version 3.2.8

Linux ≫ Linux Kernel Version 3.2.9

Linux ≫ Linux Kernel Version 3.2.10

Linux ≫ Linux Kernel Version 3.2.11

Linux ≫ Linux Kernel Version 3.2.12

Linux ≫ Linux Kernel Version 3.2.13

Linux ≫ Linux Kernel Version 3.2.14

Linux ≫ Linux Kernel Version 3.2.15

Linux ≫ Linux Kernel Version 3.2.16

Linux ≫ Linux Kernel Version 3.2.17

Linux ≫ Linux Kernel Version 3.2.18

Linux ≫ Linux Kernel Version 3.2.19

Linux ≫ Linux Kernel Version 3.2.20

Linux ≫ Linux Kernel Version 3.2.21

Linux ≫ Linux Kernel Version 3.2.22

Linux ≫ Linux Kernel Version 3.2.23

Linux ≫ Linux Kernel Version 3.2.24

Linux ≫ Linux Kernel Version 3.2.25

Linux ≫ Linux Kernel Version 3.2.26

Linux ≫ Linux Kernel Version 3.2.27

Linux ≫ Linux Kernel Version 3.2.28

Linux ≫ Linux Kernel Version 3.2.29

Linux ≫ Linux Kernel Version 3.2.30

Linux ≫ Linux Kernel Version 3.3

Linux ≫ Linux Kernel Version 3.3 Update rc1

Linux ≫ Linux Kernel Version 3.3 Update rc2

Linux ≫ Linux Kernel Version 3.3 Update rc3

Linux ≫ Linux Kernel Version 3.3 Update rc4

Linux ≫ Linux Kernel Version 3.3 Update rc5

Linux ≫ Linux Kernel Version 3.3 Update rc6

Linux ≫ Linux Kernel Version 3.3 Update rc7

Linux ≫ Linux Kernel Version 3.3.1

Linux ≫ Linux Kernel Version 3.3.2

Linux ≫ Linux Kernel Version 3.3.3

Linux ≫ Linux Kernel Version 3.3.4

Linux ≫ Linux Kernel Version 3.3.5

Linux ≫ Linux Kernel Version 3.3.6

Linux ≫ Linux Kernel Version 3.3.7

Linux ≫ Linux Kernel Version 3.3.8

Linux ≫ Linux Kernel Version 3.4

Linux ≫ Linux Kernel Version 3.4 Update rc1

Linux ≫ Linux Kernel Version 3.4 Update rc2

Linux ≫ Linux Kernel Version 3.4 Update rc3

Linux ≫ Linux Kernel Version 3.4 Update rc4

Linux ≫ Linux Kernel Version 3.4 Update rc5

Linux ≫ Linux Kernel Version 3.4 Update rc6

Linux ≫ Linux Kernel Version 3.4 Update rc7

Linux ≫ Linux Kernel Version 3.4.1

Linux ≫ Linux Kernel Version 3.4.2

Linux ≫ Linux Kernel Version 3.4.3

Linux ≫ Linux Kernel Version 3.4.4

Linux ≫ Linux Kernel Version 3.4.5

Linux ≫ Linux Kernel Version 3.4.6

Linux ≫ Linux Kernel Version 3.4.7

Linux ≫ Linux Kernel Version 3.4.8

Linux ≫ Linux Kernel Version 3.4.9

Linux ≫ Linux Kernel Version 3.4.10

Linux ≫ Linux Kernel Version 3.4.11

Linux ≫ Linux Kernel Version 3.4.12

Linux ≫ Linux Kernel Version 3.4.13

Linux ≫ Linux Kernel Version 3.4.14

Linux ≫ Linux Kernel Version 3.4.15

Linux ≫ Linux Kernel Version 3.4.16

Linux ≫ Linux Kernel Version 3.4.17

Linux ≫ Linux Kernel Version 3.4.18

Linux ≫ Linux Kernel Version 3.4.19

Linux ≫ Linux Kernel Version 3.4.20

Linux ≫ Linux Kernel Version 3.4.21

Linux ≫ Linux Kernel Version 3.4.22

Linux ≫ Linux Kernel Version 3.4.23

Linux ≫ Linux Kernel Version 3.4.24

Linux ≫ Linux Kernel Version 3.4.25

Linux ≫ Linux Kernel Version 3.4.26

Linux ≫ Linux Kernel Version 3.4.27

Linux ≫ Linux Kernel Version 3.4.28

Linux ≫ Linux Kernel Version 3.4.29

Linux ≫ Linux Kernel Version 3.4.30

Linux ≫ Linux Kernel Version 3.4.31

Linux ≫ Linux Kernel Version 3.4.32

Linux ≫ Linux Kernel Version 3.5.1

Linux ≫ Linux Kernel Version 3.5.2

Linux ≫ Linux Kernel Version 3.5.3

Linux ≫ Linux Kernel Version 3.5.4

Linux ≫ Linux Kernel Version 3.5.5

Linux ≫ Linux Kernel Version 3.5.6

Redhat ≫ Enterprise Linux Version 6.0

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.35%	0.261

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	1.9	3.4	2.9	AV:L/AC:M/Au:N/C:P/I:N/A:N

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

http://rhn.redhat.com/errata/RHSA-2013-0744.html

http://www.openwall.com/lists/oss-security/2013/03/05/13

https://www.kernel.org/pub/linux/kernel/v3.x/patch-3.6.bz2

Patch

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=4c87308bdea31a7b4828a51f6156e6f721a1fcc9

https://github.com/torvalds/linux/commit/4c87308bdea31a7b4828a51f6156e6f721a1fcc9

https://nvd.nist.gov/vuln/detail/CVE-2012-6538

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2012-6538

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2012-6538

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2012-6538