Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:18830
HistoryMay 16, 2019 - 1:48 a.m.

Information Disclosure

2019-05-1601:48:54
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
19

EPSS

0.008

Percentile

81.5%

Linux kernel is vulnerable to information disclosure attacks. A local user could exploit a flaw in the inet_diag_msg_sctpaddrs_fill(), inet_diag_msg_sctpladdrs_fill(), and sctp_get_sctp_info() functions in ‘net/sctp/sctp_diag.c’ to obtain potentially sensitive information in portions of slab memory on the target system.