CVE-2013-2634
- EPSS 0.04%
- Veröffentlicht 22.03.2013 11:59:11
- Zuletzt bearbeitet 11.04.2025 00:51:21
net/dcb/dcbnl.c in the Linux kernel before 3.8.4 does not initialize certain structures, which allows local users to obtain sensitive information from kernel stack memory via a crafted application.
CVE-2013-2635
- EPSS 0.04%
- Veröffentlicht 22.03.2013 11:59:11
- Zuletzt bearbeitet 11.04.2025 00:51:21
The rtnl_fill_ifinfo function in net/core/rtnetlink.c in the Linux kernel before 3.8.4 does not initialize a certain structure member, which allows local users to obtain sensitive information from kernel stack memory via a crafted application.
CVE-2013-0913
- EPSS 0.03%
- Veröffentlicht 18.03.2013 15:55:01
- Zuletzt bearbeitet 11.04.2025 00:51:21
Integer overflow in drivers/gpu/drm/i915/i915_gem_execbuffer.c in the i915 driver in the Direct Rendering Manager (DRM) subsystem in the Linux kernel through 3.8.3, as used in Google Chrome OS before 25.0.1364.173 and other products, allows local use...
CVE-2012-6549
- EPSS 0.03%
- Veröffentlicht 15.03.2013 20:55:08
- Zuletzt bearbeitet 11.04.2025 00:51:21
The isofs_export_encode_fh function in fs/isofs/export.c in the Linux kernel before 3.6 does not initialize a certain structure member, which allows local users to obtain sensitive information from kernel heap memory via a crafted application.
CVE-2013-2546
- EPSS 0.05%
- Veröffentlicht 15.03.2013 20:55:08
- Zuletzt bearbeitet 11.04.2025 00:51:21
The report API in the crypto user configuration API in the Linux kernel through 3.8.2 uses an incorrect C library function for copying strings, which allows local users to obtain sensitive information from kernel stack memory by leveraging the CAP_NE...
CVE-2013-2547
- EPSS 0.07%
- Veröffentlicht 15.03.2013 20:55:08
- Zuletzt bearbeitet 11.04.2025 00:51:21
The crypto_report_one function in crypto/crypto_user.c in the report API in the crypto user configuration API in the Linux kernel through 3.8.2 does not initialize certain structure members, which allows local users to obtain sensitive information fr...
CVE-2013-2548
- EPSS 0.05%
- Veröffentlicht 15.03.2013 20:55:08
- Zuletzt bearbeitet 11.04.2025 00:51:21
The crypto_report_one function in crypto/crypto_user.c in the report API in the crypto user configuration API in the Linux kernel through 3.8.2 uses an incorrect length value during a copy operation, which allows local users to obtain sensitive infor...
CVE-2012-6537
- EPSS 0.08%
- Veröffentlicht 15.03.2013 20:55:07
- Zuletzt bearbeitet 11.04.2025 00:51:21
net/xfrm/xfrm_user.c in the Linux kernel before 3.6 does not initialize certain structures, which allows local users to obtain sensitive information from kernel memory by leveraging the CAP_NET_ADMIN capability.
CVE-2012-6538
- EPSS 0.06%
- Veröffentlicht 15.03.2013 20:55:07
- Zuletzt bearbeitet 11.04.2025 00:51:21
The copy_to_user_auth function in net/xfrm/xfrm_user.c in the Linux kernel before 3.6 uses an incorrect C library function for copying a string, which allows local users to obtain sensitive information from kernel heap memory by leveraging the CAP_NE...
CVE-2012-6539
- EPSS 0.06%
- Veröffentlicht 15.03.2013 20:55:07
- Zuletzt bearbeitet 11.04.2025 00:51:21
The dev_ifconf function in net/socket.c in the Linux kernel before 3.6 does not initialize a certain structure, which allows local users to obtain sensitive information from kernel stack memory via a crafted application.