PT-2013-3829 · Linux · Linux Kernel

Mathias Krause · Publicado 2013-03-14 · Atualizado 2021-07-15 · CVE-2013-2546

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.8.3

Description The issue concerns the report API in the crypto user configuration API of the Linux kernel. It uses an incorrect C library function for copying strings, allowing local users with the CAP NET ADMIN capability to obtain sensitive information from kernel stack memory.

Recommendations For versions prior to 3.8.3, update to version 3.8.3 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-310

Identificadores relacionados

CVE-2013-2546

RHSA-2013:0829

USN-1793-1

USN-1794-1

USN-1795-1

USN-1796-1

USN-1797-1

Produtos afetados

Linux Kernel

Referências · 23

• https://github.com/torvalds/linux/commit/9a5467bf7b6e9e02ec9c3da4e23747c05faeaac6 · Nota
• https://osv.dev/vulnerability/UBUNTU-CVE-2013-2546 · Aviso do Fabricante
• https://ubuntu.com/security/notices/USN-1794-1 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2013-2546 · Nota de Segurança
• https://security-tracker.debian.org/tracker/CVE-2013-2546 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2013-2546 · Aviso do Fabricante
• http://ubuntu.com/usn/USN-1797-1 · Aviso do Fabricante
• https://ubuntu.com/security/notices/USN-1795-1 · Aviso do Fabricante
• http://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html · Aviso do Fabricante
• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=9a5467bf7b6e9e02ec9c3da4e23747c05faeaac6 · Nota
• http://ubuntu.com/usn/USN-1796-1 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2013-2546 · Aviso do Fabricante
• https://ubuntu.com/security/notices/USN-1797-1 · Aviso do Fabricante
• http://mandriva.com/security/advisories?name=MDVSA-2013:176 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2013-2546 · Nota de Segurança