Lucene search

[email protected]NVD:CVE-2013-2234

HistoryJul 04, 2013 - 9:55 p.m.

CVE-2013-2234

2013-07-0421:55:01

CWE-119

[email protected]

web.nvd.nist.gov

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

5.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.2%

JSON

The (1) key_notify_sa_flush and (2) key_notify_policy_flush functions in net/key/af_key.c in the Linux kernel before 3.10 do not initialize certain structure members, which allows local users to obtain sensitive information from kernel heap memory by reading a broadcast message from the notify interface of an IPSec key_socket.

Affected configurations

NVD

Node

linuxlinux_kernelRange≤3.9.9

linuxlinux_kernelMatch3.0rc1

linuxlinux_kernelMatch3.0rc2

linuxlinux_kernelMatch3.0rc3

linuxlinux_kernelMatch3.0rc4

linuxlinux_kernelMatch3.0rc5

linuxlinux_kernelMatch3.0rc6

linuxlinux_kernelMatch3.0rc7

linuxlinux_kernelMatch3.0.1

linuxlinux_kernelMatch3.0.2

linuxlinux_kernelMatch3.0.3

linuxlinux_kernelMatch3.0.4

linuxlinux_kernelMatch3.0.5

linuxlinux_kernelMatch3.0.6

linuxlinux_kernelMatch3.0.7

linuxlinux_kernelMatch3.0.8

linuxlinux_kernelMatch3.0.9

linuxlinux_kernelMatch3.0.10

linuxlinux_kernelMatch3.0.11

linuxlinux_kernelMatch3.0.12

linuxlinux_kernelMatch3.0.13

linuxlinux_kernelMatch3.0.14

linuxlinux_kernelMatch3.0.15

linuxlinux_kernelMatch3.0.16

linuxlinux_kernelMatch3.0.17

linuxlinux_kernelMatch3.0.18

linuxlinux_kernelMatch3.0.19

linuxlinux_kernelMatch3.0.20

linuxlinux_kernelMatch3.0.21

linuxlinux_kernelMatch3.0.22

linuxlinux_kernelMatch3.0.23

linuxlinux_kernelMatch3.0.24

linuxlinux_kernelMatch3.0.25

linuxlinux_kernelMatch3.0.26

linuxlinux_kernelMatch3.0.27

linuxlinux_kernelMatch3.0.28

linuxlinux_kernelMatch3.0.29

linuxlinux_kernelMatch3.0.30

linuxlinux_kernelMatch3.0.31

linuxlinux_kernelMatch3.0.32

linuxlinux_kernelMatch3.0.33

linuxlinux_kernelMatch3.0.34

linuxlinux_kernelMatch3.0.35

linuxlinux_kernelMatch3.0.36

linuxlinux_kernelMatch3.0.37

linuxlinux_kernelMatch3.0.38

linuxlinux_kernelMatch3.0.39

linuxlinux_kernelMatch3.0.40

linuxlinux_kernelMatch3.0.41

linuxlinux_kernelMatch3.0.42

linuxlinux_kernelMatch3.0.43

linuxlinux_kernelMatch3.0.44

linuxlinux_kernelMatch3.0.45

linuxlinux_kernelMatch3.0.46

linuxlinux_kernelMatch3.0.47

linuxlinux_kernelMatch3.0.48

linuxlinux_kernelMatch3.0.49

linuxlinux_kernelMatch3.0.50

linuxlinux_kernelMatch3.0.51

linuxlinux_kernelMatch3.0.52

linuxlinux_kernelMatch3.0.53

linuxlinux_kernelMatch3.0.54

linuxlinux_kernelMatch3.0.55

linuxlinux_kernelMatch3.0.56

linuxlinux_kernelMatch3.0.57

linuxlinux_kernelMatch3.0.58

linuxlinux_kernelMatch3.0.59

linuxlinux_kernelMatch3.0.60

linuxlinux_kernelMatch3.0.61

linuxlinux_kernelMatch3.0.62

linuxlinux_kernelMatch3.0.63

linuxlinux_kernelMatch3.0.64

linuxlinux_kernelMatch3.0.65

linuxlinux_kernelMatch3.0.66

linuxlinux_kernelMatch3.0.67

linuxlinux_kernelMatch3.0.68

linuxlinux_kernelMatch3.1

linuxlinux_kernelMatch3.1rc1

linuxlinux_kernelMatch3.1rc2

linuxlinux_kernelMatch3.1rc3

linuxlinux_kernelMatch3.1rc4

linuxlinux_kernelMatch3.1.1

linuxlinux_kernelMatch3.1.2

linuxlinux_kernelMatch3.1.3

linuxlinux_kernelMatch3.1.4

linuxlinux_kernelMatch3.1.5

linuxlinux_kernelMatch3.1.6

linuxlinux_kernelMatch3.1.7

linuxlinux_kernelMatch3.1.8

linuxlinux_kernelMatch3.1.9

linuxlinux_kernelMatch3.1.10

linuxlinux_kernelMatch3.2

linuxlinux_kernelMatch3.2x86

linuxlinux_kernelMatch3.2rc2

linuxlinux_kernelMatch3.2rc3

linuxlinux_kernelMatch3.2rc4

linuxlinux_kernelMatch3.2rc5

linuxlinux_kernelMatch3.2rc6

linuxlinux_kernelMatch3.2rc7

linuxlinux_kernelMatch3.2.1

linuxlinux_kernelMatch3.2.1x86

linuxlinux_kernelMatch3.2.2

linuxlinux_kernelMatch3.2.3

linuxlinux_kernelMatch3.2.4

linuxlinux_kernelMatch3.2.5

linuxlinux_kernelMatch3.2.6

linuxlinux_kernelMatch3.2.7

linuxlinux_kernelMatch3.2.8

linuxlinux_kernelMatch3.2.9

linuxlinux_kernelMatch3.2.10

linuxlinux_kernelMatch3.2.11

linuxlinux_kernelMatch3.2.12

linuxlinux_kernelMatch3.2.13

linuxlinux_kernelMatch3.2.14

linuxlinux_kernelMatch3.2.15

linuxlinux_kernelMatch3.2.16

linuxlinux_kernelMatch3.2.17

linuxlinux_kernelMatch3.2.18

linuxlinux_kernelMatch3.2.19

linuxlinux_kernelMatch3.2.20

linuxlinux_kernelMatch3.2.21

linuxlinux_kernelMatch3.2.22

linuxlinux_kernelMatch3.2.23

linuxlinux_kernelMatch3.2.24

linuxlinux_kernelMatch3.2.25

linuxlinux_kernelMatch3.2.26

linuxlinux_kernelMatch3.2.27

linuxlinux_kernelMatch3.2.28

linuxlinux_kernelMatch3.2.29

linuxlinux_kernelMatch3.2.30

linuxlinux_kernelMatch3.3

linuxlinux_kernelMatch3.3rc1

linuxlinux_kernelMatch3.3rc2

linuxlinux_kernelMatch3.3rc3

linuxlinux_kernelMatch3.3rc4

linuxlinux_kernelMatch3.3rc5

linuxlinux_kernelMatch3.3rc6

linuxlinux_kernelMatch3.3rc7

linuxlinux_kernelMatch3.3.1

linuxlinux_kernelMatch3.3.2

linuxlinux_kernelMatch3.3.3

linuxlinux_kernelMatch3.3.4

linuxlinux_kernelMatch3.3.5

linuxlinux_kernelMatch3.3.6

linuxlinux_kernelMatch3.3.7

linuxlinux_kernelMatch3.3.8

linuxlinux_kernelMatch3.4

linuxlinux_kernelMatch3.4x86

linuxlinux_kernelMatch3.4rc1

linuxlinux_kernelMatch3.4rc1x86

linuxlinux_kernelMatch3.4rc2

linuxlinux_kernelMatch3.4rc2x86

linuxlinux_kernelMatch3.4rc3

linuxlinux_kernelMatch3.4rc3x86

linuxlinux_kernelMatch3.4rc4

linuxlinux_kernelMatch3.4rc4x86

linuxlinux_kernelMatch3.4rc5

linuxlinux_kernelMatch3.4rc5x86

linuxlinux_kernelMatch3.4rc6

linuxlinux_kernelMatch3.4rc6x86

linuxlinux_kernelMatch3.4rc7

linuxlinux_kernelMatch3.4rc7x86

linuxlinux_kernelMatch3.4.1

linuxlinux_kernelMatch3.4.1x86

linuxlinux_kernelMatch3.4.2

linuxlinux_kernelMatch3.4.2x86

linuxlinux_kernelMatch3.4.3

linuxlinux_kernelMatch3.4.3x86

linuxlinux_kernelMatch3.4.4

linuxlinux_kernelMatch3.4.4x86

linuxlinux_kernelMatch3.4.5

linuxlinux_kernelMatch3.4.5x86

linuxlinux_kernelMatch3.4.6

linuxlinux_kernelMatch3.4.7

linuxlinux_kernelMatch3.4.8

linuxlinux_kernelMatch3.4.9

linuxlinux_kernelMatch3.4.10

linuxlinux_kernelMatch3.4.11

linuxlinux_kernelMatch3.4.12

linuxlinux_kernelMatch3.4.13

linuxlinux_kernelMatch3.4.14

linuxlinux_kernelMatch3.4.15

linuxlinux_kernelMatch3.4.16

linuxlinux_kernelMatch3.4.17

linuxlinux_kernelMatch3.4.18

linuxlinux_kernelMatch3.4.19

linuxlinux_kernelMatch3.4.20

linuxlinux_kernelMatch3.4.21

linuxlinux_kernelMatch3.4.22

linuxlinux_kernelMatch3.4.23

linuxlinux_kernelMatch3.4.24

linuxlinux_kernelMatch3.4.25

linuxlinux_kernelMatch3.4.26

linuxlinux_kernelMatch3.4.27

linuxlinux_kernelMatch3.4.28

linuxlinux_kernelMatch3.4.29

linuxlinux_kernelMatch3.4.30

linuxlinux_kernelMatch3.4.31

linuxlinux_kernelMatch3.4.32

linuxlinux_kernelMatch3.5.1

linuxlinux_kernelMatch3.5.2

linuxlinux_kernelMatch3.5.3

linuxlinux_kernelMatch3.5.4

linuxlinux_kernelMatch3.5.5

linuxlinux_kernelMatch3.5.6

linuxlinux_kernelMatch3.5.7

linuxlinux_kernelMatch3.6

linuxlinux_kernelMatch3.6.1

linuxlinux_kernelMatch3.6.2

linuxlinux_kernelMatch3.6.3

linuxlinux_kernelMatch3.6.4

linuxlinux_kernelMatch3.6.5

linuxlinux_kernelMatch3.6.6

linuxlinux_kernelMatch3.6.7

linuxlinux_kernelMatch3.6.8

linuxlinux_kernelMatch3.6.9

linuxlinux_kernelMatch3.6.10

linuxlinux_kernelMatch3.6.11

linuxlinux_kernelMatch3.7

linuxlinux_kernelMatch3.7.1

linuxlinux_kernelMatch3.7.2

linuxlinux_kernelMatch3.7.3

linuxlinux_kernelMatch3.7.4

linuxlinux_kernelMatch3.7.5

linuxlinux_kernelMatch3.7.6

linuxlinux_kernelMatch3.7.7

linuxlinux_kernelMatch3.7.8

linuxlinux_kernelMatch3.7.9

linuxlinux_kernelMatch3.7.10

linuxlinux_kernelMatch3.8.0

linuxlinux_kernelMatch3.8.1

linuxlinux_kernelMatch3.8.2

linuxlinux_kernelMatch3.8.3

linuxlinux_kernelMatch3.8.4

linuxlinux_kernelMatch3.8.5

linuxlinux_kernelMatch3.8.6

linuxlinux_kernelMatch3.8.7

linuxlinux_kernelMatch3.8.8

linuxlinux_kernelMatch3.9rc1

linuxlinux_kernelMatch3.9rc2

linuxlinux_kernelMatch3.9rc3

linuxlinux_kernelMatch3.9rc4

linuxlinux_kernelMatch3.9rc5

linuxlinux_kernelMatch3.9rc6

linuxlinux_kernelMatch3.9rc7

linuxlinux_kernelMatch3.9.0

linuxlinux_kernelMatch3.9.1

linuxlinux_kernelMatch3.9.2

linuxlinux_kernelMatch3.9.3

linuxlinux_kernelMatch3.9.4

linuxlinux_kernelMatch3.9.5

linuxlinux_kernelMatch3.9.6

linuxlinux_kernelMatch3.9.7

linuxlinux_kernelMatch3.9.8

References

git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a5cc68f3d63306d0d288f31edfc2ae6ef8ecd887

lists.opensuse.org/opensuse-security-announce/2013-09/msg00003.html

lists.opensuse.org/opensuse-security-announce/2013-09/msg00004.html

lists.opensuse.org/opensuse-updates/2013-12/msg00129.html

rhn.redhat.com/errata/RHSA-2013-1166.html

rhn.redhat.com/errata/RHSA-2013-1645.html

www.debian.org/security/2013/dsa-2766

www.openwall.com/lists/oss-security/2013/07/02/7

www.ubuntu.com/usn/USN-1912-1

www.ubuntu.com/usn/USN-1913-1

www.ubuntu.com/usn/USN-1938-1

www.ubuntu.com/usn/USN-1941-1

www.ubuntu.com/usn/USN-1942-1

www.ubuntu.com/usn/USN-1943-1

www.ubuntu.com/usn/USN-1944-1

www.ubuntu.com/usn/USN-1945-1

www.ubuntu.com/usn/USN-1946-1

www.ubuntu.com/usn/USN-1947-1

bugzilla.redhat.com/show_bug.cgi?id=980995

github.com/torvalds/linux/commit/a5cc68f3d63306d0d288f31edfc2ae6ef8ecd887

www.kernel.org/pub/linux/kernel/v3.x/patch-3.10.bz2

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

5.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.2%

JSON

Related for NVD:CVE-2013-2234

debiancve1 ubuntucve1 prion1 cvelist1 cve1 openvas81 fedora21 nessus35 ubuntu10 mageia7 oraclelinux6 securityvulns4 redhat4 centos2 debian2 osv2 vmware1 suse3 veracode14 amazon1 altlinux1