7.9 High
CVSS2
Attack Vector
ADJACENT_NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:A/AC:M/Au:N/C:C/I:C/A:C
6.1 Medium
AI Score
Confidence
High
0.033 Low
EPSS
Percentile
91.4%
Kees Cook discovered a flaw in the Linux kernel’s iSCSI subsystem. A remote
unauthenticated attacker could exploit this flaw to cause a denial of
service (system crash) or potentially gain administrative privileges.
(CVE-2013-2850)
An information leak was discovered in the Linux kernel when inotify is used
to monitor the /dev/ptmx device. A local user could exploit this flaw to
discover keystroke timing and potentially discover sensitive information
like password length. (CVE-2013-0160)
A flaw was discovered in the Linux kernel’s perf events subsystem for Intel
Sandy Bridge and Ivy Bridge processors. A local user could exploit this
flaw to cause a denial of service (system crash). (CVE-2013-2146)
An information leak was discovered in the Linux kernel’s crypto API. A
local user could exploit this flaw to examine potentially sensitive
information from the kernel’s stack memory. (CVE-2013-3076)
An information leak was discovered in the Linux kernel’s rcvmsg path for
ATM (Asynchronous Transfer Mode). A local user could exploit this flaw to
examine potentially sensitive information from the kernel’s stack memory.
(CVE-2013-3222)
An information leak was discovered in the Linux kernel’s recvmsg path for
ax25 address family. A local user could exploit this flaw to examine
potentially sensitive information from the kernel’s stack memory.
(CVE-2013-3223)
An information leak was discovered in the Linux kernel’s recvmsg path for
the bluetooth address family. A local user could exploit this flaw to
examine potentially sensitive information from the kernel’s stack memory.
(CVE-2013-3224)
An information leak was discovered in the Linux kernel’s bluetooth rfcomm
protocol support. A local user could exploit this flaw to examine
potentially sensitive information from the kernel’s stack memory.
(CVE-2013-3225)
An information leak was discovered in the Linux kernel’s CAIF protocol
implementation. A local user could exploit this flaw to examine potentially
sensitive information from the kernel’s stack memory. (CVE-2013-3227)
An information leak was discovered in the Linux kernel’s IRDA (infrared)
support subsystem. A local user could exploit this flaw to examine
potentially sensitive information from the kernel’s stack memory.
(CVE-2013-3228)
An information leak was discovered in the Linux kernel’s s390 - z/VM
support. A local user could exploit this flaw to examine potentially
sensitive information from the kernel’s stack memory. (CVE-2013-3229)
An information leak was discovered in the Linux kernel’s llc (Logical Link
Layer 2) support. A local user could exploit this flaw to examine
potentially sensitive information from the kernel’s stack memory.
(CVE-2013-3231)
An information leak was discovered in the Linux kernel’s receive message
handling for the netrom address family. A local user could exploit this
flaw to obtain sensitive information from the kernel’s stack memory.
(CVE-2013-3232)
An information leak was discovered in the Linux kernel’s Rose X.25 protocol
layer. A local user could exploit this flaw to examine potentially
sensitive information from the kernel’s stack memory. (CVE-2013-3234)
An information leak was discovered in the Linux kernel’s TIPC (Transparent
Inter Process Communication) protocol implementation. A local user could
exploit this flaw to examine potentially sensitive information from the
kernel’s stack memory. (CVE-2013-3235)
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Ubuntu | 12.04 | noarch | linux-image-3.2.0-1433-omap4 | < 3.2.0-1433.44 | UNKNOWN |
Ubuntu | 12.04 | noarch | block-modules-3.2.0-1433-omap4-di | < 3.2.0-1433.44 | UNKNOWN |
Ubuntu | 12.04 | noarch | crypto-modules-3.2.0-1433-omap4-di | < 3.2.0-1433.44 | UNKNOWN |
Ubuntu | 12.04 | noarch | fat-modules-3.2.0-1433-omap4-di | < 3.2.0-1433.44 | UNKNOWN |
Ubuntu | 12.04 | noarch | fs-core-modules-3.2.0-1433-omap4-di | < 3.2.0-1433.44 | UNKNOWN |
Ubuntu | 12.04 | noarch | fs-secondary-modules-3.2.0-1433-omap4-di | < 3.2.0-1433.44 | UNKNOWN |
Ubuntu | 12.04 | noarch | input-modules-3.2.0-1433-omap4-di | < 3.2.0-1433.44 | UNKNOWN |
Ubuntu | 12.04 | noarch | irda-modules-3.2.0-1433-omap4-di | < 3.2.0-1433.44 | UNKNOWN |
Ubuntu | 12.04 | noarch | kernel-image-3.2.0-1433-omap4-di | < 3.2.0-1433.44 | UNKNOWN |
Ubuntu | 12.04 | noarch | linux-headers-3.2.0-1433 | < 3.2.0-1433.44 | UNKNOWN |
ubuntu.com/security/CVE-2013-0160
ubuntu.com/security/CVE-2013-2146
ubuntu.com/security/CVE-2013-2850
ubuntu.com/security/CVE-2013-3076
ubuntu.com/security/CVE-2013-3222
ubuntu.com/security/CVE-2013-3223
ubuntu.com/security/CVE-2013-3224
ubuntu.com/security/CVE-2013-3225
ubuntu.com/security/CVE-2013-3227
ubuntu.com/security/CVE-2013-3228
ubuntu.com/security/CVE-2013-3229
ubuntu.com/security/CVE-2013-3231
ubuntu.com/security/CVE-2013-3232
ubuntu.com/security/CVE-2013-3234
ubuntu.com/security/CVE-2013-3235