Lucene search
MitreCVE-2013-7269HistoryJan 06, 2014 - 4:55 p.m.
CVE-2013-7269
2014-01-0616:55:09
CWE-20
mitre
web.nvd.nist.gov
61
cve-2013-7269
linux kernel
netrom
security vulnerability
sensitive information
recvfrom
recvmmsg
recvmsg
nvd
CVSS2
4.9
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:C/I:N/A:N
AI Score
4.7
Confidence
High
EPSS
0
Percentile
10.1%
The nr_recvmsg function in net/netrom/af_netrom.c in the Linux kernel before 3.12.4 updates a certain length value without ensuring that an associated data structure has been initialized, which allows local users to obtain sensitive information from kernel memory via a (1) recvfrom, (2) recvmmsg, or (3) recvmsg system call.
Affected configurations
Node
linuxlinux_kernelRange≤3.12.3
ORlinuxlinux_kernelMatch3.0rc1
ORlinuxlinux_kernelMatch3.0rc2
ORlinuxlinux_kernelMatch3.0rc3
ORlinuxlinux_kernelMatch3.0rc4
ORlinuxlinux_kernelMatch3.0rc5
ORlinuxlinux_kernelMatch3.0rc6
ORlinuxlinux_kernelMatch3.0rc7
ORlinuxlinux_kernelMatch3.0.1
ORlinuxlinux_kernelMatch3.0.2
ORlinuxlinux_kernelMatch3.0.3
ORlinuxlinux_kernelMatch3.0.4
ORlinuxlinux_kernelMatch3.0.5
ORlinuxlinux_kernelMatch3.0.6
ORlinuxlinux_kernelMatch3.0.7
ORlinuxlinux_kernelMatch3.0.8
ORlinuxlinux_kernelMatch3.0.9
ORlinuxlinux_kernelMatch3.0.10
ORlinuxlinux_kernelMatch3.0.11
ORlinuxlinux_kernelMatch3.0.12
ORlinuxlinux_kernelMatch3.0.13
ORlinuxlinux_kernelMatch3.0.14
ORlinuxlinux_kernelMatch3.0.15
ORlinuxlinux_kernelMatch3.0.16
ORlinuxlinux_kernelMatch3.0.17
ORlinuxlinux_kernelMatch3.0.18
ORlinuxlinux_kernelMatch3.0.19
ORlinuxlinux_kernelMatch3.0.20
ORlinuxlinux_kernelMatch3.0.21
ORlinuxlinux_kernelMatch3.0.22
ORlinuxlinux_kernelMatch3.0.23
ORlinuxlinux_kernelMatch3.0.24
ORlinuxlinux_kernelMatch3.0.25
ORlinuxlinux_kernelMatch3.0.26
ORlinuxlinux_kernelMatch3.0.27
ORlinuxlinux_kernelMatch3.0.28
ORlinuxlinux_kernelMatch3.0.29
ORlinuxlinux_kernelMatch3.0.30
ORlinuxlinux_kernelMatch3.0.31
ORlinuxlinux_kernelMatch3.0.32
ORlinuxlinux_kernelMatch3.0.33
ORlinuxlinux_kernelMatch3.0.34
ORlinuxlinux_kernelMatch3.0.35
ORlinuxlinux_kernelMatch3.0.36
ORlinuxlinux_kernelMatch3.0.37
ORlinuxlinux_kernelMatch3.0.38
ORlinuxlinux_kernelMatch3.0.39
ORlinuxlinux_kernelMatch3.0.40
ORlinuxlinux_kernelMatch3.0.41
ORlinuxlinux_kernelMatch3.0.42
ORlinuxlinux_kernelMatch3.0.43
ORlinuxlinux_kernelMatch3.0.44
ORlinuxlinux_kernelMatch3.0.45
ORlinuxlinux_kernelMatch3.0.46
ORlinuxlinux_kernelMatch3.0.47
ORlinuxlinux_kernelMatch3.0.48
ORlinuxlinux_kernelMatch3.0.49
ORlinuxlinux_kernelMatch3.0.50
ORlinuxlinux_kernelMatch3.0.51
ORlinuxlinux_kernelMatch3.0.52
ORlinuxlinux_kernelMatch3.0.53
ORlinuxlinux_kernelMatch3.0.54
ORlinuxlinux_kernelMatch3.0.55
ORlinuxlinux_kernelMatch3.0.56
ORlinuxlinux_kernelMatch3.0.57
ORlinuxlinux_kernelMatch3.0.58
ORlinuxlinux_kernelMatch3.0.59
ORlinuxlinux_kernelMatch3.0.60
ORlinuxlinux_kernelMatch3.0.61
ORlinuxlinux_kernelMatch3.0.62
ORlinuxlinux_kernelMatch3.0.63
ORlinuxlinux_kernelMatch3.0.64
ORlinuxlinux_kernelMatch3.0.65
ORlinuxlinux_kernelMatch3.0.66
ORlinuxlinux_kernelMatch3.0.67
ORlinuxlinux_kernelMatch3.0.68
ORlinuxlinux_kernelMatch3.1
ORlinuxlinux_kernelMatch3.1rc1
ORlinuxlinux_kernelMatch3.1rc2
ORlinuxlinux_kernelMatch3.1rc3
ORlinuxlinux_kernelMatch3.1rc4
ORlinuxlinux_kernelMatch3.1.1
ORlinuxlinux_kernelMatch3.1.2
ORlinuxlinux_kernelMatch3.1.3
ORlinuxlinux_kernelMatch3.1.4
ORlinuxlinux_kernelMatch3.1.5
ORlinuxlinux_kernelMatch3.1.6
ORlinuxlinux_kernelMatch3.1.7
ORlinuxlinux_kernelMatch3.1.8
ORlinuxlinux_kernelMatch3.1.9
ORlinuxlinux_kernelMatch3.1.10
ORlinuxlinux_kernelMatch3.2
ORlinuxlinux_kernelMatch3.2rc2
ORlinuxlinux_kernelMatch3.2rc3
ORlinuxlinux_kernelMatch3.2rc4
ORlinuxlinux_kernelMatch3.2rc5
ORlinuxlinux_kernelMatch3.2rc6
ORlinuxlinux_kernelMatch3.2rc7
ORlinuxlinux_kernelMatch3.2.1
ORlinuxlinux_kernelMatch3.2.2
ORlinuxlinux_kernelMatch3.2.3
ORlinuxlinux_kernelMatch3.2.4
ORlinuxlinux_kernelMatch3.2.5
ORlinuxlinux_kernelMatch3.2.6
ORlinuxlinux_kernelMatch3.2.7
ORlinuxlinux_kernelMatch3.2.8
ORlinuxlinux_kernelMatch3.2.9
ORlinuxlinux_kernelMatch3.2.10
ORlinuxlinux_kernelMatch3.2.11
ORlinuxlinux_kernelMatch3.2.12
ORlinuxlinux_kernelMatch3.2.13
ORlinuxlinux_kernelMatch3.2.14
ORlinuxlinux_kernelMatch3.2.15
ORlinuxlinux_kernelMatch3.2.16
ORlinuxlinux_kernelMatch3.2.17
ORlinuxlinux_kernelMatch3.2.18
ORlinuxlinux_kernelMatch3.2.19
ORlinuxlinux_kernelMatch3.2.20
ORlinuxlinux_kernelMatch3.2.21
ORlinuxlinux_kernelMatch3.2.22
ORlinuxlinux_kernelMatch3.2.23
ORlinuxlinux_kernelMatch3.2.24
ORlinuxlinux_kernelMatch3.2.25
ORlinuxlinux_kernelMatch3.2.26
ORlinuxlinux_kernelMatch3.2.27
ORlinuxlinux_kernelMatch3.2.28
ORlinuxlinux_kernelMatch3.2.29
ORlinuxlinux_kernelMatch3.2.30
ORlinuxlinux_kernelMatch3.3
ORlinuxlinux_kernelMatch3.3rc1
ORlinuxlinux_kernelMatch3.3rc2
ORlinuxlinux_kernelMatch3.3rc3
ORlinuxlinux_kernelMatch3.3rc4
ORlinuxlinux_kernelMatch3.3rc5
ORlinuxlinux_kernelMatch3.3rc6
ORlinuxlinux_kernelMatch3.3rc7
ORlinuxlinux_kernelMatch3.3.1
ORlinuxlinux_kernelMatch3.3.2
ORlinuxlinux_kernelMatch3.3.3
ORlinuxlinux_kernelMatch3.3.4
ORlinuxlinux_kernelMatch3.3.5
ORlinuxlinux_kernelMatch3.3.6
ORlinuxlinux_kernelMatch3.3.7
ORlinuxlinux_kernelMatch3.3.8
ORlinuxlinux_kernelMatch3.4
ORlinuxlinux_kernelMatch3.4rc1
ORlinuxlinux_kernelMatch3.4rc2
ORlinuxlinux_kernelMatch3.4rc3
ORlinuxlinux_kernelMatch3.4rc4
ORlinuxlinux_kernelMatch3.4rc5
ORlinuxlinux_kernelMatch3.4rc6
ORlinuxlinux_kernelMatch3.4rc7
ORlinuxlinux_kernelMatch3.4.1
ORlinuxlinux_kernelMatch3.4.2
ORlinuxlinux_kernelMatch3.4.3
ORlinuxlinux_kernelMatch3.4.4
ORlinuxlinux_kernelMatch3.4.5
ORlinuxlinux_kernelMatch3.4.6
ORlinuxlinux_kernelMatch3.4.7
ORlinuxlinux_kernelMatch3.4.8
ORlinuxlinux_kernelMatch3.4.9
ORlinuxlinux_kernelMatch3.4.10
ORlinuxlinux_kernelMatch3.4.11
ORlinuxlinux_kernelMatch3.4.12
ORlinuxlinux_kernelMatch3.4.13
ORlinuxlinux_kernelMatch3.4.14
ORlinuxlinux_kernelMatch3.4.15
ORlinuxlinux_kernelMatch3.4.16
ORlinuxlinux_kernelMatch3.4.17
ORlinuxlinux_kernelMatch3.4.18
ORlinuxlinux_kernelMatch3.4.19
ORlinuxlinux_kernelMatch3.4.20
ORlinuxlinux_kernelMatch3.4.21
ORlinuxlinux_kernelMatch3.4.22
ORlinuxlinux_kernelMatch3.4.23
ORlinuxlinux_kernelMatch3.4.24
ORlinuxlinux_kernelMatch3.4.25
ORlinuxlinux_kernelMatch3.4.26
ORlinuxlinux_kernelMatch3.4.27
ORlinuxlinux_kernelMatch3.4.28
ORlinuxlinux_kernelMatch3.4.29
ORlinuxlinux_kernelMatch3.4.30
ORlinuxlinux_kernelMatch3.4.31
ORlinuxlinux_kernelMatch3.4.32
ORlinuxlinux_kernelMatch3.5.1
ORlinuxlinux_kernelMatch3.5.2
ORlinuxlinux_kernelMatch3.5.3
ORlinuxlinux_kernelMatch3.5.4
ORlinuxlinux_kernelMatch3.5.5
ORlinuxlinux_kernelMatch3.5.6
ORlinuxlinux_kernelMatch3.5.7
ORlinuxlinux_kernelMatch3.6
ORlinuxlinux_kernelMatch3.6.1
ORlinuxlinux_kernelMatch3.6.2
ORlinuxlinux_kernelMatch3.6.3
ORlinuxlinux_kernelMatch3.6.4
ORlinuxlinux_kernelMatch3.6.5
ORlinuxlinux_kernelMatch3.6.6
ORlinuxlinux_kernelMatch3.6.7
ORlinuxlinux_kernelMatch3.6.8
ORlinuxlinux_kernelMatch3.6.9
ORlinuxlinux_kernelMatch3.6.10
ORlinuxlinux_kernelMatch3.6.11
ORlinuxlinux_kernelMatch3.7
ORlinuxlinux_kernelMatch3.7.1
ORlinuxlinux_kernelMatch3.7.2
ORlinuxlinux_kernelMatch3.7.3
ORlinuxlinux_kernelMatch3.7.4
ORlinuxlinux_kernelMatch3.7.5
ORlinuxlinux_kernelMatch3.7.6
ORlinuxlinux_kernelMatch3.7.7
ORlinuxlinux_kernelMatch3.7.8
ORlinuxlinux_kernelMatch3.7.9
ORlinuxlinux_kernelMatch3.7.10
ORlinuxlinux_kernelMatch3.8.0
ORlinuxlinux_kernelMatch3.8.1
ORlinuxlinux_kernelMatch3.8.2
ORlinuxlinux_kernelMatch3.8.3
ORlinuxlinux_kernelMatch3.8.4
ORlinuxlinux_kernelMatch3.8.5
ORlinuxlinux_kernelMatch3.8.6
ORlinuxlinux_kernelMatch3.8.7
ORlinuxlinux_kernelMatch3.8.8
ORlinuxlinux_kernelMatch3.8.9
ORlinuxlinux_kernelMatch3.8.10
ORlinuxlinux_kernelMatch3.8.11
ORlinuxlinux_kernelMatch3.8.12
ORlinuxlinux_kernelMatch3.8.13
ORlinuxlinux_kernelMatch3.9rc1
ORlinuxlinux_kernelMatch3.9rc2
ORlinuxlinux_kernelMatch3.9rc3
ORlinuxlinux_kernelMatch3.9rc4
ORlinuxlinux_kernelMatch3.9rc5
ORlinuxlinux_kernelMatch3.9rc6
ORlinuxlinux_kernelMatch3.9rc7
ORlinuxlinux_kernelMatch3.9.0
ORlinuxlinux_kernelMatch3.9.1
ORlinuxlinux_kernelMatch3.9.2
ORlinuxlinux_kernelMatch3.9.3
ORlinuxlinux_kernelMatch3.9.4
ORlinuxlinux_kernelMatch3.9.5
ORlinuxlinux_kernelMatch3.9.6
ORlinuxlinux_kernelMatch3.9.7
ORlinuxlinux_kernelMatch3.9.8
ORlinuxlinux_kernelMatch3.9.9
ORlinuxlinux_kernelMatch3.9.10
ORlinuxlinux_kernelMatch3.9.11
ORlinuxlinux_kernelMatch3.10.1
ORlinuxlinux_kernelMatch3.10.2
ORlinuxlinux_kernelMatch3.10.3
ORlinuxlinux_kernelMatch3.10.4
ORlinuxlinux_kernelMatch3.10.5
ORlinuxlinux_kernelMatch3.10.6
ORlinuxlinux_kernelMatch3.10.7
ORlinuxlinux_kernelMatch3.10.8
ORlinuxlinux_kernelMatch3.10.9
ORlinuxlinux_kernelMatch3.10.10
ORlinuxlinux_kernelMatch3.10.11
ORlinuxlinux_kernelMatch3.10.12
ORlinuxlinux_kernelMatch3.10.13
ORlinuxlinux_kernelMatch3.10.14
ORlinuxlinux_kernelMatch3.10.15
ORlinuxlinux_kernelMatch3.10.16
ORlinuxlinux_kernelMatch3.10.17
ORlinuxlinux_kernelMatch3.10.18
ORlinuxlinux_kernelMatch3.10.19
ORlinuxlinux_kernelMatch3.10.20
ORlinuxlinux_kernelMatch3.10.21
ORlinuxlinux_kernelMatch3.10.22
ORlinuxlinux_kernelMatch3.10.23
ORlinuxlinux_kernelMatch3.11
ORlinuxlinux_kernelMatch3.11.1
ORlinuxlinux_kernelMatch3.11.2
ORlinuxlinux_kernelMatch3.11.3
ORlinuxlinux_kernelMatch3.11.4
ORlinuxlinux_kernelMatch3.11.5
ORlinuxlinux_kernelMatch3.11.6
ORlinuxlinux_kernelMatch3.11.7
ORlinuxlinux_kernelMatch3.11.8
ORlinuxlinux_kernelMatch3.11.9
ORlinuxlinux_kernelMatch3.11.10
ORlinuxlinux_kernelMatch3.12
ORlinuxlinux_kernelMatch3.12.1
ORlinuxlinux_kernelMatch3.12.2
| Vendor | Product | Version | CPE |
|---|---|---|---|
| linux | linux_kernel | 3.0.42 | cpe:/o:linux:linux_kernel:3.0.42::: |
| linux | linux_kernel | 3.4.17 | cpe:/o:linux:linux_kernel:3.4.17::: |
| linux | linux_kernel | 3.7.7 | cpe:/o:linux:linux_kernel:3.7.7::: |
| linux | linux_kernel | 3.7.4 | cpe:/o:linux:linux_kernel:3.7.4::: |
| linux | linux_kernel | 3.9.2 | cpe:/o:linux:linux_kernel:3.9.2::: |
| linux | linux_kernel | 3.0.68 | cpe:/o:linux:linux_kernel:3.0.68::: |
| linux | linux_kernel | 3.1.9 | cpe:/o:linux:linux_kernel:3.1.9::: |
| linux | linux_kernel | 3.2.16 | cpe:/o:linux:linux_kernel:3.2.16::: |
| linux | linux_kernel | 3.0.59 | cpe:/o:linux:linux_kernel:3.0.59::: |
| linux | linux_kernel | 3.2.22 | cpe:/o:linux:linux_kernel:3.2.22::: |
References
git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f3d3342602f8bcbf37d7c46641cb9bca7618eb1c
secunia.com/advisories/55882
secunia.com/advisories/56036
www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.12.4
www.openwall.com/lists/oss-security/2013/12/31/7
www.securityfocus.com/bid/64742
www.ubuntu.com/usn/USN-2109-1
www.ubuntu.com/usn/USN-2110-1
www.ubuntu.com/usn/USN-2113-1
www.ubuntu.com/usn/USN-2117-1
www.ubuntu.com/usn/USN-2128-1
www.ubuntu.com/usn/USN-2129-1
www.ubuntu.com/usn/USN-2135-1
www.ubuntu.com/usn/USN-2136-1
www.ubuntu.com/usn/USN-2138-1
www.ubuntu.com/usn/USN-2139-1
www.ubuntu.com/usn/USN-2141-1
bugzilla.redhat.com/show_bug.cgi?id=1039845
exchange.xforce.ibmcloud.com/vulnerabilities/90130
github.com/torvalds/linux/commit/f3d3342602f8bcbf37d7c46641cb9bca7618eb1c
Related
prion
prion
Information disclosure
2014-01-06 16:55:00
Design/Logic Flaw
2014-01-06 16:55:00
debiancve
debiancve
CVE-2013-7269
2014-01-06 16:55:09
ubuntucve
ubuntucve
CVE-2013-7269
2014-01-06 00:00:00
cvelist
cvelist
CVE-2013-7269
2014-01-06 11:00:00
nvd
nvd
CVE-2013-7269
2014-01-06 16:55:09
CVE-2013-6463
2014-01-06 16:55:09
cve
cve
CVE-2013-6463
2014-01-06 16:55:09
nessus
nessus
Mandriva Linux Security Advisory : kernel (MDVSA-2014:001)
2014-01-14 00:00:00
Ubuntu 12.04 LTS : linux vulnerabilities (USN-2109-1)
2014-02-19 00:00:00
Ubuntu 10.04 LTS : linux vulnerabilities (USN-2128-1)
2014-03-06 00:00:00
securityvulns
securityvulns
[ MDVSA-2014:001 ] kernel
2014-01-14 00:00:00
Linux kernel security vulnerabilities
2014-03-31 00:00:00
openvas
openvas
Ubuntu Update for linux USN-2109-1
2014-02-20 00:00:00
Ubuntu Update for linux-ti-omap4 USN-2110-1
2014-02-20 00:00:00
Ubuntu: Security Advisory (USN-2128-1)
2014-03-12 00:00:00
ubuntu
ubuntu
Linux kernel vulnerabilities
2014-02-18 00:00:00
Linux kernel (EC2) vulnerabilities
2014-03-06 00:00:00
Linux kernel vulnerabilities
2014-03-05 00:00:00
suse
suse
Security update for the Linux Kernel (important)
2014-09-16 19:04:20
CVSS2
4.9
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:C/I:N/A:N
AI Score
4.7
Confidence
High
EPSS
0
Percentile
10.1%
Related for CVE-2013-7269