Design/Logic Flaw

2013-03-1520:55:00

PRIOn knowledge base

www.prio-n.com

6 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

The report API in the crypto user configuration API in the Linux kernel through 3.8.2 uses an incorrect C library function for copying strings, which allows local users to obtain sensitive information from kernel stack memory by leveraging the CAP_NET_ADMIN capability.

CPENameOperatorVersion
linux_kerneleq3.2.21
linux_kerneleq3.4.30
linux_kerneleq3.4.4
linux_kerneleq3.0.25
linux_kerneleq3.1.2
linux_kerneleq3.4.11
linux_kerneleq3.0 rc2
linux_kerneleq3.2.19
linux_kerneleq3.0.22
linux_kerneleq3.2.23

Name	Operator	Version
linux_kernel	eq	3.2.21
linux_kernel	eq	3.4.30
linux_kernel	eq	3.4.4
linux_kernel	eq	3.0.25
linux_kernel	eq	3.1.2
linux_kernel	eq	3.4.11
linux_kernel	eq	3.0 rc2
linux_kernel	eq	3.2.19
linux_kernel	eq	3.0.22
linux_kernel	eq	3.2.23