PT-2013-1102 · Linux+1 · Linux Kernel+1

Mathias Krause · Publicado 2013-02-18 · Atualizado 2017-11-29 · CVE-2013-3076

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.9-rc8

Description The issue concerns the crypto API in the Linux kernel, where certain length variables are not properly initialized. This allows local users to obtain sensitive information from the kernel stack memory by using a specially crafted recvmsg or recvfrom system call. The problem is related to the hash recvmsg function in crypto/algif hash.c and the skcipher recvmsg function in crypto/algif skcipher.c.

Recommendations For Linux kernel versions prior to 3.9-rc8, consider updating to a version that includes the necessary fixes to prevent sensitive information disclosure. As a temporary workaround, restrict access to the recvmsg and recvfrom system calls to minimize the risk of exploitation. Additionally, consider disabling the hash recvmsg and skcipher recvmsg functions until a patch is available.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

BDU:2015-03064

CVE-2013-3076

DSA-2669-1

RHSA-2013:0829

SUSE-RU-2015:0621-1

SUSE-SU-2015:0481-1

SUSE-SU-2015:0581-1

SUSE-SU-2015:1174-1

USN-1837-1

USN-1849-1

USN-1878-1

USN-1879-1

USN-1880-1

USN-1881-1

USN-1882-1

USN-1883-1

Produtos afetados

Linux Kernel

Suse

Referências · 47

• https://github.com/torvalds/linux/commit/6a76f8c0ab19f215af2a3442870eeb5f0e81998d · Nota
• https://github.com/torvalds/linux/commit/72a763d805a48ac8c0bf48fdb510e84c12de51fe · Nota
• https://ubuntu.com/security/notices/USN-1881-1 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3235 · Nota de Segurança
• https://cve.org/CVERecord?id=CVE-2013-3076 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3228 · Nota de Segurança
• https://security-tracker.debian.org/tracker/CVE-2013-3076 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3225 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2015 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1796 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3076 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2094 · Nota de Segurança
• https://ubuntu.com/security/notices/USN-1879-1 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2013-3076 · Aviso do Fabricante
• http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00016.html · Aviso do Fabricante