CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:M/Au:N/C:P/I:N/A:N
AI Score
Confidence
High
EPSS
Percentile
35.4%
The ccid3_hc_tx_getsockopt function in net/dccp/ccids/ccid3.c in the Linux kernel before 3.6 does not initialize a certain structure, which allows local users to obtain sensitive information from kernel stack memory via a crafted application.
Vendor | Product | Version | CPE |
---|---|---|---|
linux | linux_kernel | 3.4.31 | cpe:/o:linux:linux_kernel:3.4.31::: |
linux | linux_kernel | 3.4.15 | cpe:/o:linux:linux_kernel:3.4.15::: |
linux | linux_kernel | 3.4.32 | cpe:/o:linux:linux_kernel:3.4.32::: |
linux | linux_kernel | 3.0.44 | cpe:/o:linux:linux_kernel:3.0.44::: |
linux | linux_kernel | 3.0.47 | cpe:/o:linux:linux_kernel:3.0.47::: |
linux | linux_kernel | 3.1.1 | cpe:/o:linux:linux_kernel:3.1.1::: |
linux | linux_kernel | 3.0.58 | cpe:/o:linux:linux_kernel:3.0.58::: |
linux | linux_kernel | 3.0.43 | cpe:/o:linux:linux_kernel:3.0.43::: |
linux | linux_kernel | 3.3 | cpe:/o:linux:linux_kernel:3.3:rc2:: |
linux | linux_kernel | 3.1 | cpe:/o:linux:linux_kernel:3.1:rc1:: |