CVE-2013-3231

Loading...

General

Score:4.7/10.0
Severity:Low
Category:Information Leak / Disclosure

Impact Metrics

Confidentiality:Complete
Integrity:None
Availability:None

Exploitability Metrics

Access Vector:Local
Access Complexity:Medium
Authentication:None

Relative vulnerabilities

CVE-2009-4020, CVE-2009-4067, CVE-2009-4537, CVE-2009-4895, CVE-2010-0298, CVE-2010-0306, CVE-2010-0307, CVE-2010-0309, CVE-2010-0410, CVE-2010-0415, CVE-2010-0419, CVE-2010-0435, CVE-2010-0623, CVE-2010-0727, CVE-2010-1085, CVE-2010-1162, CVE-2010-1173, CVE-2010-1436, CVE-2010-1437, CVE-2010-1636, CVE-2010-1641, CVE-2010-2066, CVE-2010-2071, CVE-2010-2226, CVE-2010-2478, CVE-2010-2492, CVE-2010-2524, CVE-2010-2537, CVE-2010-2538, CVE-2010-2803, CVE-2010-2942, CVE-2010-2955, CVE-2010-2959, CVE-2010-2960, CVE-2010-2962, CVE-2010-2963, CVE-2010-3078, CVE-2010-3079, CVE-2010-3080, CVE-2010-3081, CVE-2010-3084, CVE-2010-3296, CVE-2010-3298, CVE-2010-3301, CVE-2010-3432, CVE-2010-3437, CVE-2010-3442, CVE-2010-3698, CVE-2010-3705, CVE-2010-3858, CVE-2010-3861, CVE-2010-3865, CVE-2010-3874, CVE-2010-3876, CVE-2010-3880, CVE-2010-3904, CVE-2010-4072, CVE-2010-4073, CVE-2010-4074, CVE-2010-4075, CVE-2010-4077, CVE-2010-4079, CVE-2010-4082, CVE-2010-4083, CVE-2010-4158, CVE-2010-4160, CVE-2010-4162, CVE-2010-4163, CVE-2010-4165, CVE-2010-4243, CVE-2010-4249, CVE-2010-4250, CVE-2010-4251, CVE-2010-4258, CVE-2010-4263, CVE-2010-4346, CVE-2010-4525, CVE-2010-4565, CVE-2010-4655, CVE-2010-5313, CVE-2011-0006, CVE-2011-0521, CVE-2011-0710, CVE-2011-0711, CVE-2011-0726, CVE-2011-1010, CVE-2011-1013, CVE-2011-1016, CVE-2011-1019, CVE-2011-1020, CVE-2011-1023, CVE-2011-1078, CVE-2011-1079, CVE-2011-1080, CVE-2011-1082, CVE-2011-1083, CVE-2011-1090, CVE-2011-1093, CVE-2011-1160, CVE-2011-1161, CVE-2011-1162, CVE-2011-1163, CVE-2011-1170, CVE-2011-1171, CVE-2011-1172, CVE-2011-1182, CVE-2011-1494, CVE-2011-1495, CVE-2011-1573, CVE-2011-1576, CVE-2011-1577, CVE-2011-1581, CVE-2011-1593, CVE-2011-1598, CVE-2011-1745, CVE-2011-1746, CVE-2011-1748, CVE-2011-1767, CVE-2011-1768, CVE-2011-1770, CVE-2011-1771, CVE-2011-1776, CVE-2011-1833, CVE-2011-1898, CVE-2011-2022, CVE-2011-2203, CVE-2011-2213, CVE-2011-2484, CVE-2011-2492, CVE-2011-2494, CVE-2011-2495, CVE-2011-2496, CVE-2011-2497, CVE-2011-2517, CVE-2011-2521, CVE-2011-2525, CVE-2011-2534, CVE-2011-2693, CVE-2011-2695, CVE-2011-2699, CVE-2011-2905, CVE-2011-2928, CVE-2011-2942, CVE-2011-3188, CVE-2011-3191, CVE-2011-3209, CVE-2011-3347, CVE-2011-3353, CVE-2011-3359, CVE-2011-3363, CVE-2011-3593, CVE-2011-3637, CVE-2011-3638, CVE-2011-4077, CVE-2011-4081, CVE-2011-4086, CVE-2011-4097, CVE-2011-4098, CVE-2011-4110, CVE-2011-4127, CVE-2011-4132, CVE-2011-4324, CVE-2011-4330, CVE-2011-4594, CVE-2011-5321, CVE-2012-0045, CVE-2012-0056, CVE-2012-0207, CVE-2012-0879, CVE-2012-1097, CVE-2012-1179, CVE-2012-1568, CVE-2012-1601, CVE-2012-2100, CVE-2012-2119, CVE-2012-2121, CVE-2012-2123, CVE-2012-2133, CVE-2012-2136, CVE-2012-2137, CVE-2012-2313, CVE-2012-2372, CVE-2012-2375, CVE-2012-2383, CVE-2012-2384, CVE-2012-2390, CVE-2012-2744, CVE-2012-2745, CVE-2012-3375, CVE-2012-3400, CVE-2012-3412, CVE-2012-3430, CVE-2012-3510, CVE-2012-3511, CVE-2012-3552, CVE-2012-4398, CVE-2012-4444, CVE-2012-4461, CVE-2012-4508, CVE-2012-4530, CVE-2012-4542, CVE-2012-4565, CVE-2012-5515, CVE-2012-6537, CVE-2012-6538, CVE-2012-6539, CVE-2012-6540, CVE-2012-6541, CVE-2012-6542, CVE-2012-6544, CVE-2012-6545, CVE-2012-6546, CVE-2012-6547, CVE-2012-6548, CVE-2012-6549, CVE-2012-6647, CVE-2012-6657, CVE-2013-0153, CVE-2013-0160, CVE-2013-0190, CVE-2013-0216, CVE-2013-0217, CVE-2013-0228, CVE-2013-0231, CVE-2013-0268, CVE-2013-0310, CVE-2013-0343, CVE-2013-0349, CVE-2013-0871, CVE-2013-0913, CVE-2013-0914, CVE-2013-1767, CVE-2013-1773, CVE-2013-1774, CVE-2013-1792, CVE-2013-1796, CVE-2013-1797, CVE-2013-1798, CVE-2013-1826, CVE-2013-1827, CVE-2013-1848, CVE-2013-1860, CVE-2013-1928, CVE-2013-1929, CVE-2013-1935, CVE-2013-1943, CVE-2013-1979, CVE-2013-2015, CVE-2013-2017, CVE-2013-2094, CVE-2013-2128, CVE-2013-2141, CVE-2013-2146, CVE-2013-2147, CVE-2013-2164, CVE-2013-2206, CVE-2013-2224, CVE-2013-2232, CVE-2013-2234, CVE-2013-2237, CVE-2013-2596, CVE-2013-2634, CVE-2013-2635, CVE-2013-2850, CVE-2013-2851, CVE-2013-2852, CVE-2013-2888, CVE-2013-2889, CVE-2013-2892, CVE-2013-2893, CVE-2013-2897, CVE-2013-2929, CVE-2013-3076, CVE-2013-3222, CVE-2013-3223, CVE-2013-3224, CVE-2013-3225, CVE-2013-3226, CVE-2013-3227, CVE-2013-3228, CVE-2013-3229, CVE-2013-3230, CVE-2013-3232, CVE-2013-3233, CVE-2013-3234, CVE-2013-3235, CVE-2013-3301, CVE-2013-4162, CVE-2013-4299, CVE-2013-4345, CVE-2013-4387, CVE-2013-4470, CVE-2013-4483, CVE-2013-4511, CVE-2013-4587, CVE-2013-4588, CVE-2013-4591, CVE-2013-4592, CVE-2013-6367, CVE-2013-6368, CVE-2013-6378, CVE-2013-6383, CVE-2013-6405, CVE-2013-7271, CVE-2013-7339, CVE-2014-0055, CVE-2014-0069, CVE-2014-0077, CVE-2014-0101, CVE-2014-0181, CVE-2014-0196, CVE-2014-0203, CVE-2014-0205, CVE-2014-1444, CVE-2014-1445, CVE-2014-1446, CVE-2014-1737, CVE-2014-1738, CVE-2014-1874, CVE-2014-2523, CVE-2014-2672, CVE-2014-2678, CVE-2014-2706, CVE-2014-2851, CVE-2014-3122, CVE-2014-3144, CVE-2014-3145, CVE-2014-3153, CVE-2014-3184, CVE-2014-3185, CVE-2014-3215, CVE-2014-3601, CVE-2014-3610, CVE-2014-3611, CVE-2014-3645, CVE-2014-3646, CVE-2014-3673, CVE-2014-3687, CVE-2014-3688, CVE-2014-3690, CVE-2014-3917, CVE-2014-3940, CVE-2014-4608, CVE-2014-4652, CVE-2014-4653, CVE-2014-4654, CVE-2014-4655, CVE-2014-4656, CVE-2014-4667, CVE-2014-4699, CVE-2014-4943, CVE-2014-5045, CVE-2014-5077, CVE-2014-5471, CVE-2014-5472, CVE-2014-6410, CVE-2014-7822, CVE-2014-7825, CVE-2014-7826, CVE-2014-7841, CVE-2014-7842, CVE-2014-8133, CVE-2014-8134, CVE-2014-8159, CVE-2014-8369, CVE-2014-8709, CVE-2014-8884, CVE-2014-9322, CVE-2014-9419, CVE-2014-9420, CVE-2014-9529, CVE-2014-9584, CVE-2014-9585, CVE-2014-9683, CVE-2015-0239, CVE-2015-1593, CVE-2015-1805, CVE-2015-2830, CVE-2015-2922, CVE-2015-2925, CVE-2015-3331, CVE-2015-3339, CVE-2015-3636, CVE-2015-5156, CVE-2015-5157, CVE-2015-5307, CVE-2015-5364, CVE-2015-5366, CVE-2015-7550, CVE-2015-7613, CVE-2015-7872, CVE-2015-8104, CVE-2015-8324, CVE-2015-8543, CVE-2015-8767, CVE-2016-0774, CVE-2016-2550

Published on 22/04/13 - Updated on 29/11/17

Description

The llc_ui_recvmsg function in net/llc/af_llc.c in the Linux kernel before 3.9-rc7 does not initialize a certain length variable, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call.

Category: Information Leak / Disclosure

CWE-200 (Information Exposure)
An information exposure is the intentional or unintentional disclosure of information to an actor that is not explicitly authorized to have access to that information.

Security Notices

US National Vulnerability DatabaseCVE-2013-3231
Amazon Linux ALAS-2013-200
Agence Nationale de la Sécurité des Systèmes d'Information CERTA-2013-AVI-323, CERTA-2013-AVI-324, CERTA-2013-AVI-336, CERTA-2013-AVI-356, CERTA-2013-AVI-375, CERTA-2013-AVI-411
CentOS CESA-2013:1034, CESA-2013:1645
Debian DSA-2668-1, DSA-2669-1
Oracle Linux ELSA-2013-1034, ELSA-2013-1348, ELSA-2013-1645, ELSA-2013-2584, ELSA-2013-2585, ELSA-2016-0855
Redhat RHSA-2013:1034, RHSA-2013:1645
SUSE SUSE-SU-2013:1022, SUSE-SU-2013:1182, SUSE-SU-2013:1832, SUSE-SU-2014:0287, SUSE-SU-2014:0536
Ubuntu USN-1837-1, USN-1849-1, USN-1876-1, USN-1877-1, USN-1878-1, USN-1879-1, USN-1880-1, USN-1881-1, USN-1882-1, USN-1883-1

Exploits

No exploits available for this CVE in our database.

Relative technologies

VendorProduct
linuxlinux_kernel

Share this vulnerability with:

Twitter Facebook LinkedIn Mail