PT-2013-3829 · Linux · Linux Kernel

Mathias Krause · Published 2013-03-14 · Updated 2021-07-15 · CVE-2013-2546

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.8.3

Description The issue concerns the report API in the crypto user configuration API of the Linux kernel. It uses an incorrect C library function for copying strings, allowing local users with the CAP NET ADMIN capability to obtain sensitive information from kernel stack memory.

Recommendations For versions prior to 3.8.3, update to version 3.8.3 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-310

Related Identifiers

CVE-2013-2546

RHSA-2013:0829

USN-1793-1

USN-1794-1

USN-1795-1

USN-1796-1

USN-1797-1

Affected Products

Linux Kernel

References · 23

• https://osv.dev/vulnerability/UBUNTU-CVE-2013-2546 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-1794-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2013-2546 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2013-2546 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2013-2546 · Vendor Advisory
• http://ubuntu.com/usn/USN-1797-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-1795-1 · Vendor Advisory
• http://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html · Vendor Advisory
• http://ubuntu.com/usn/USN-1796-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2013-2546 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-1797-1 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDVSA-2013:176 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2013-2546 · Security Note
• http://ubuntu.com/usn/USN-1795-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2013-2546 · Vendor Advisory