PT-2013-3611 · Linux+4 · Linux Kernel+4
Prasad Pandit
·
Publicado
2013-07-04
·
Atualizado
2023-02-13
·
CVE-2013-2234
CVSS v2.0
2.1
Baixa
| Vetor | AV:L/AC:L/Au:N/C:P/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 3.10
Description
The issue affects the Linux kernel, where the
key notify sa flush and key notify policy flush functions in net/key/af key.c do not properly initialize certain structure members. This allows local users to obtain sensitive information from kernel heap memory by reading a broadcast message from the notify interface of an IPSec key socket.Recommendations
For Linux kernel versions prior to 3.10, update to version 3.10 or later to resolve the issue.
Exploit
Correção
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Centos
Linux Kernel
Red Hat
Suse