PT-2013-3830 · Linux+1 · Linux Kernel+1

Mathias Krause · Publicado 2013-03-14 · Atualizado 2021-07-15 · CVE-2013-2547

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.8.3

Description The issue concerns the crypto report one function in the Linux kernel, which fails to initialize certain structure members. This allows local users with the CAP NET ADMIN capability to obtain sensitive information from kernel heap memory.

Recommendations For versions prior to 3.8.3, update to version 3.8.3 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-310

Identificadores relacionados

CVE-2013-2547

RHSA-2013:0829

USN-1793-1

USN-1794-1

USN-1795-1

USN-1796-1

USN-1797-1

Produtos afetados

Linux Kernel

Suse

Referências · 23

• https://github.com/torvalds/linux/commit/9a5467bf7b6e9e02ec9c3da4e23747c05faeaac6 · Nota
• https://ubuntu.com/security/notices/USN-1794-1 · Aviso do Fabricante
• http://ubuntu.com/usn/USN-1797-1 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2013-2547 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2013-2547 · Nota de Segurança
• https://ubuntu.com/security/notices/USN-1795-1 · Aviso do Fabricante
• http://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2013-2547 · Aviso do Fabricante
• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=9a5467bf7b6e9e02ec9c3da4e23747c05faeaac6 · Nota
• http://ubuntu.com/usn/USN-1796-1 · Aviso do Fabricante
• https://ubuntu.com/security/notices/USN-1797-1 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2013-2547 · Aviso do Fabricante
• http://mandriva.com/security/advisories?name=MDVSA-2013:176 · Aviso do Fabricante
• http://ubuntu.com/usn/USN-1795-1 · Aviso do Fabricante
• https://ubuntu.com/security/notices/USN-1796-1 · Aviso do Fabricante