PT-2013-2001 · Linux+3 · Linux Kernel+3
Mathias Krause
·
Published
2013-03-07
·
Updated
2019-04-22
·
CVE-2012-6538
CVSS v2.0
1.9
Low
| Vector | AV:L/AC:M/Au:N/C:P/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 3.6
Description
The issue is related to the
copy to user auth function in net/xfrm/xfrm user.c, which incorrectly uses a C library function for copying a string. This allows local users with the CAP NET ADMIN capability to obtain sensitive information from kernel heap memory.Recommendations
For Linux kernel versions prior to 3.6, update to version 3.6 or later to resolve the issue. As a temporary workaround, consider restricting the use of the
CAP NET ADMIN capability to minimize the risk of exploitation.Exploit
Fix
Information Disclosure
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Centos
Linux Kernel
Red Hat
Suse