4.9

CVE-2013-3234

The rose_recvmsg function in net/rose/af_rose.c in the Linux kernel before 3.9-rc7 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
LinuxLinux Kernel Updaterc6 Version <= 3.9
LinuxLinux Kernel Version3.9 Updaterc1
LinuxLinux Kernel Version3.9 Updaterc2
LinuxLinux Kernel Version3.9 Updaterc3
LinuxLinux Kernel Version3.9 Updaterc4
LinuxLinux Kernel Version3.9 Updaterc5
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.05% 0.167
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.9 3.9 6.9
AV:L/AC:L/Au:N/C:C/I:N/A:N
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.