7.9 High
CVSS2
Attack Vector
ADJACENT_NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:A/AC:M/Au:N/C:C/I:C/A:C
6.6 Medium
AI Score
Confidence
High
0.033 Low
EPSS
Percentile
91.4%
Kees Cook discovered a flaw in the Linux kernel’s iSCSI subsystem. A remote
unauthenticated attacker could exploit this flaw to cause a denial of
service (system crash) or potentially gain administrative privileges.
(CVE-2013-2850)
An flaw was discovered in the Linux kernel’s perf_events interface. A local
user could exploit this flaw to escalate privileges on the system.
(CVE-2013-2094)
An information leak was discovered in the Linux kernel’s tkill and tgkill
system calls when used from compat processes. A local user could exploit
this flaw to examine potentially sensitive kernel memory. (CVE-2013-2141)
A flaw was discovered in the Linux kernel’s perf events subsystem for Intel
Sandy Bridge and Ivy Bridge processors. A local user could exploit this
flaw to cause a denial of service (system crash). (CVE-2013-2146)
An information leak was discovered in the Linux kernel’s crypto API. A
local user could exploit this flaw to examine potentially sensitive
information from the kernel’s stack memory. (CVE-2013-3076)
An information leak was discovered in the Linux kernel’s rcvmsg path for
ATM (Asynchronous Transfer Mode). A local user could exploit this flaw to
examine potentially sensitive information from the kernel’s stack memory.
(CVE-2013-3222)
An information leak was discovered in the Linux kernel’s recvmsg path for
ax25 address family. A local user could exploit this flaw to examine
potentially sensitive information from the kernel’s stack memory.
(CVE-2013-3223)
An information leak was discovered in the Linux kernel’s recvmsg path for
the bluetooth address family. A local user could exploit this flaw to
examine potentially sensitive information from the kernel’s stack memory.
(CVE-2013-3224)
An information leak was discovered in the Linux kernel’s bluetooth rfcomm
protocol support. A local user could exploit this flaw to examine
potentially sensitive information from the kernel’s stack memory.
(CVE-2013-3225)
An information leak was discovered in the Linux kernel’s bluetooth SCO
sockets implementation. A local user could exploit this flaw to examine
potentially sensitive information from the kernel’s stack memory.
(CVE-2013-3226)
An information leak was discovered in the Linux kernel’s CAIF protocol
implementation. A local user could exploit this flaw to examine potentially
sensitive information from the kernel’s stack memory. (CVE-2013-3227)
An information leak was discovered in the Linux kernel’s IRDA (infrared)
support subsystem. A local user could exploit this flaw to examine
potentially sensitive information from the kernel’s stack memory.
(CVE-2013-3228)
An information leak was discovered in the Linux kernel’s s390 - z/VM
support. A local user could exploit this flaw to examine potentially
sensitive information from the kernel’s stack memory. (CVE-2013-3229)
An information leak was discovered in the Linux kernel’s l2tp (Layer Two
Tunneling Protocol) implementation. A local user could exploit this flaw to
examine potentially sensitive information from the kernel’s stack memory.
(CVE-2013-3230)
An information leak was discovered in the Linux kernel’s llc (Logical Link
Layer 2) support. A local user could exploit this flaw to examine
potentially sensitive information from the kernel’s stack memory.
(CVE-2013-3231)
An information leak was discovered in the Linux kernel’s receive message
handling for the netrom address family. A local user could exploit this
flaw to obtain sensitive information from the kernel’s stack memory.
(CVE-2013-3232)
An information leak was discovered in the Linux kernel’s nfc (near field
communication) support. A local user could exploit this flaw to examine
potentially sensitive information from the kernel’s stack memory.
(CVE-2013-3233)
An information leak was discovered in the Linux kernel’s Rose X.25 protocol
layer. A local user could exploit this flaw to examine potentially
sensitive information from the kernel’s stack memory. (CVE-2013-3234)
An information leak was discovered in the Linux kernel’s TIPC (Transparent
Inter Process Communication) protocol implementation. A local user could
exploit this flaw to examine potentially sensitive information from the
kernel’s stack memory. (CVE-2013-3235)
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Ubuntu | 12.04 | noarch | linux-image-3.8.0-23-generic | < 3.8.0-23.34~precise1 | UNKNOWN |
Ubuntu | 12.04 | noarch | block-modules-3.8.0-23-generic-di | < 3.8.0-23.34~precise1 | UNKNOWN |
Ubuntu | 12.04 | noarch | crypto-modules-3.8.0-23-generic-di | < 3.8.0-23.34~precise1 | UNKNOWN |
Ubuntu | 12.04 | noarch | fat-modules-3.8.0-23-generic-di | < 3.8.0-23.34~precise1 | UNKNOWN |
Ubuntu | 12.04 | noarch | fb-modules-3.8.0-23-generic-di | < 3.8.0-23.34~precise1 | UNKNOWN |
Ubuntu | 12.04 | noarch | firewire-core-modules-3.8.0-23-generic-di | < 3.8.0-23.34~precise1 | UNKNOWN |
Ubuntu | 12.04 | noarch | floppy-modules-3.8.0-23-generic-di | < 3.8.0-23.34~precise1 | UNKNOWN |
Ubuntu | 12.04 | noarch | fs-core-modules-3.8.0-23-generic-di | < 3.8.0-23.34~precise1 | UNKNOWN |
Ubuntu | 12.04 | noarch | fs-secondary-modules-3.8.0-23-generic-di | < 3.8.0-23.34~precise1 | UNKNOWN |
Ubuntu | 12.04 | noarch | input-modules-3.8.0-23-generic-di | < 3.8.0-23.34~precise1 | UNKNOWN |
ubuntu.com/security/CVE-2013-2094
ubuntu.com/security/CVE-2013-2141
ubuntu.com/security/CVE-2013-2146
ubuntu.com/security/CVE-2013-2850
ubuntu.com/security/CVE-2013-3076
ubuntu.com/security/CVE-2013-3222
ubuntu.com/security/CVE-2013-3223
ubuntu.com/security/CVE-2013-3224
ubuntu.com/security/CVE-2013-3225
ubuntu.com/security/CVE-2013-3226
ubuntu.com/security/CVE-2013-3227
ubuntu.com/security/CVE-2013-3228
ubuntu.com/security/CVE-2013-3229
ubuntu.com/security/CVE-2013-3230
ubuntu.com/security/CVE-2013-3231
ubuntu.com/security/CVE-2013-3232
ubuntu.com/security/CVE-2013-3233
ubuntu.com/security/CVE-2013-3234
ubuntu.com/security/CVE-2013-3235