PT-2013-2001 · Linux+3 · Linux Kernel+3

Mathias Krause · Publicado 2013-03-07 · Atualizado 2019-04-22 · CVE-2012-6538

Positive Technologies (AI Summary)

CVSS v2.0

1.9

Baixa

Vetor base

AV:L/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.6

Description The issue is related to the copy to user auth function in net/xfrm/xfrm user.c, which incorrectly uses a C library function for copying a string. This allows local users with the CAP NET ADMIN capability to obtain sensitive information from kernel heap memory.

Recommendations For Linux kernel versions prior to 3.6, update to version 3.6 or later to resolve the issue. As a temporary workaround, consider restricting the use of the CAP NET ADMIN capability to minimize the risk of exploitation.

Exploit

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CESA-2013_0744

CVE-2012-6538

RHSA-2013:0744

RHSA-2013_0744

SUSE-SU-2015:0652-1

USN-1644-1

USN-1645-1

USN-1646-1

USN-1647-1

USN-1648-1

USN-1649-1

USN-1652-1

Produtos afetados

Centos

Linux Kernel

Red Hat

Suse

Referências · 91

• 🔥 https://github.com/tempbottle/CVE-2014-0196 · Exploit
• https://github.com/torvalds/linux/commit/4291086b1f081b869c6d79e5b7441633dc3ace00 · Nota
• https://github.com/torvalds/linux/commit/276bdb82dedb290511467a5a4fdbe9f0b52dce6f · Nota
• https://github.com/torvalds/linux/commit/4c87308bdea31a7b4828a51f6156e6f721a1fcc9 · Nota
• https://github.com/torvalds/linux/commit/5f00110f7273f9ff04ac69a5f85bb535a4fd0987 · Nota
• https://github.com/torvalds/linux/commit/a2c118bfab8bc6b8bb213abfc35201e441693d55 · Nota
• https://bdu.fstec.ru/vul/2014-00109 · Nota de Segurança
• http://openwall.com/lists/oss-security/2013/03/07/2 · Nota
• https://access.redhat.com/security/cve/CVE-2013-1796 · Nota
• https://bdu.fstec.ru/vul/2015-05311 · Nota de Segurança
• https://ubuntu.com/security/notices/USN-1648-1 · Aviso do Fabricante
• http://exploit-db.com/exploits/33516 · Nota
• https://access.redhat.com/security/cve/CVE-2013-1792 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2012-6538 · Aviso do Fabricante
• https://access.redhat.com/security/cve/CVE-2013-1797 · Nota