Lucene search

[email protected]NVD:CVE-2013-7263

HistoryJan 06, 2014 - 4:55 p.m.

CVE-2013-7263

2014-01-0616:55:09

CWE-20

[email protected]

web.nvd.nist.gov

4.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:C/I:N/A:N

7.2 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.1%

JSON

The Linux kernel before 3.12.4 updates certain length values before ensuring that associated data structures have been initialized, which allows local users to obtain sensitive information from kernel stack memory via a (1) recvfrom, (2) recvmmsg, or (3) recvmsg system call, related to net/ipv4/ping.c, net/ipv4/raw.c, net/ipv4/udp.c, net/ipv6/raw.c, and net/ipv6/udp.c.

Affected configurations

NVD

Node

linuxlinux_kernelRange≤3.12.3

linuxlinux_kernelMatch3.0rc1

linuxlinux_kernelMatch3.0rc2

linuxlinux_kernelMatch3.0rc3

linuxlinux_kernelMatch3.0rc4

linuxlinux_kernelMatch3.0rc5

linuxlinux_kernelMatch3.0rc6

linuxlinux_kernelMatch3.0rc7

linuxlinux_kernelMatch3.0.1

linuxlinux_kernelMatch3.0.2

linuxlinux_kernelMatch3.0.3

linuxlinux_kernelMatch3.0.4

linuxlinux_kernelMatch3.0.5

linuxlinux_kernelMatch3.0.6

linuxlinux_kernelMatch3.0.7

linuxlinux_kernelMatch3.0.8

linuxlinux_kernelMatch3.0.9

linuxlinux_kernelMatch3.0.10

linuxlinux_kernelMatch3.0.11

linuxlinux_kernelMatch3.0.12

linuxlinux_kernelMatch3.0.13

linuxlinux_kernelMatch3.0.14

linuxlinux_kernelMatch3.0.15

linuxlinux_kernelMatch3.0.16

linuxlinux_kernelMatch3.0.17

linuxlinux_kernelMatch3.0.18

linuxlinux_kernelMatch3.0.19

linuxlinux_kernelMatch3.0.20

linuxlinux_kernelMatch3.0.21

linuxlinux_kernelMatch3.0.22

linuxlinux_kernelMatch3.0.23

linuxlinux_kernelMatch3.0.24

linuxlinux_kernelMatch3.0.25

linuxlinux_kernelMatch3.0.26

linuxlinux_kernelMatch3.0.27

linuxlinux_kernelMatch3.0.28

linuxlinux_kernelMatch3.0.29

linuxlinux_kernelMatch3.0.30

linuxlinux_kernelMatch3.0.31

linuxlinux_kernelMatch3.0.32

linuxlinux_kernelMatch3.0.33

linuxlinux_kernelMatch3.0.34

linuxlinux_kernelMatch3.0.35

linuxlinux_kernelMatch3.0.36

linuxlinux_kernelMatch3.0.37

linuxlinux_kernelMatch3.0.38

linuxlinux_kernelMatch3.0.39

linuxlinux_kernelMatch3.0.40

linuxlinux_kernelMatch3.0.41

linuxlinux_kernelMatch3.0.42

linuxlinux_kernelMatch3.0.43

linuxlinux_kernelMatch3.0.44

linuxlinux_kernelMatch3.0.45

linuxlinux_kernelMatch3.0.46

linuxlinux_kernelMatch3.0.47

linuxlinux_kernelMatch3.0.48

linuxlinux_kernelMatch3.0.49

linuxlinux_kernelMatch3.0.50

linuxlinux_kernelMatch3.0.51

linuxlinux_kernelMatch3.0.52

linuxlinux_kernelMatch3.0.53

linuxlinux_kernelMatch3.0.54

linuxlinux_kernelMatch3.0.55

linuxlinux_kernelMatch3.0.56

linuxlinux_kernelMatch3.0.57

linuxlinux_kernelMatch3.0.58

linuxlinux_kernelMatch3.0.59

linuxlinux_kernelMatch3.0.60

linuxlinux_kernelMatch3.0.61

linuxlinux_kernelMatch3.0.62

linuxlinux_kernelMatch3.0.63

linuxlinux_kernelMatch3.0.64

linuxlinux_kernelMatch3.0.65

linuxlinux_kernelMatch3.0.66

linuxlinux_kernelMatch3.0.67

linuxlinux_kernelMatch3.0.68

linuxlinux_kernelMatch3.1

linuxlinux_kernelMatch3.1rc1

linuxlinux_kernelMatch3.1rc2

linuxlinux_kernelMatch3.1rc3

linuxlinux_kernelMatch3.1rc4

linuxlinux_kernelMatch3.1.1

linuxlinux_kernelMatch3.1.2

linuxlinux_kernelMatch3.1.3

linuxlinux_kernelMatch3.1.4

linuxlinux_kernelMatch3.1.5

linuxlinux_kernelMatch3.1.6

linuxlinux_kernelMatch3.1.7

linuxlinux_kernelMatch3.1.8

linuxlinux_kernelMatch3.1.9

linuxlinux_kernelMatch3.1.10

linuxlinux_kernelMatch3.2

linuxlinux_kernelMatch3.2rc2

linuxlinux_kernelMatch3.2rc3

linuxlinux_kernelMatch3.2rc4

linuxlinux_kernelMatch3.2rc5

linuxlinux_kernelMatch3.2rc6

linuxlinux_kernelMatch3.2rc7

linuxlinux_kernelMatch3.2.1

linuxlinux_kernelMatch3.2.2

linuxlinux_kernelMatch3.2.3

linuxlinux_kernelMatch3.2.4

linuxlinux_kernelMatch3.2.5

linuxlinux_kernelMatch3.2.6

linuxlinux_kernelMatch3.2.7

linuxlinux_kernelMatch3.2.8

linuxlinux_kernelMatch3.2.9

linuxlinux_kernelMatch3.2.10

linuxlinux_kernelMatch3.2.11

linuxlinux_kernelMatch3.2.12

linuxlinux_kernelMatch3.2.13

linuxlinux_kernelMatch3.2.14

linuxlinux_kernelMatch3.2.15

linuxlinux_kernelMatch3.2.16

linuxlinux_kernelMatch3.2.17

linuxlinux_kernelMatch3.2.18

linuxlinux_kernelMatch3.2.19

linuxlinux_kernelMatch3.2.20

linuxlinux_kernelMatch3.2.21

linuxlinux_kernelMatch3.2.22

linuxlinux_kernelMatch3.2.23

linuxlinux_kernelMatch3.2.24

linuxlinux_kernelMatch3.2.25

linuxlinux_kernelMatch3.2.26

linuxlinux_kernelMatch3.2.27

linuxlinux_kernelMatch3.2.28

linuxlinux_kernelMatch3.2.29

linuxlinux_kernelMatch3.2.30

linuxlinux_kernelMatch3.3

linuxlinux_kernelMatch3.3rc1

linuxlinux_kernelMatch3.3rc2

linuxlinux_kernelMatch3.3rc3

linuxlinux_kernelMatch3.3rc4

linuxlinux_kernelMatch3.3rc5

linuxlinux_kernelMatch3.3rc6

linuxlinux_kernelMatch3.3rc7

linuxlinux_kernelMatch3.3.1

linuxlinux_kernelMatch3.3.2

linuxlinux_kernelMatch3.3.3

linuxlinux_kernelMatch3.3.4

linuxlinux_kernelMatch3.3.5

linuxlinux_kernelMatch3.3.6

linuxlinux_kernelMatch3.3.7

linuxlinux_kernelMatch3.3.8

linuxlinux_kernelMatch3.4

linuxlinux_kernelMatch3.4rc1

linuxlinux_kernelMatch3.4rc2

linuxlinux_kernelMatch3.4rc3

linuxlinux_kernelMatch3.4rc4

linuxlinux_kernelMatch3.4rc5

linuxlinux_kernelMatch3.4rc6

linuxlinux_kernelMatch3.4rc7

linuxlinux_kernelMatch3.4.1

linuxlinux_kernelMatch3.4.2

linuxlinux_kernelMatch3.4.3

linuxlinux_kernelMatch3.4.4

linuxlinux_kernelMatch3.4.5

linuxlinux_kernelMatch3.4.6

linuxlinux_kernelMatch3.4.7

linuxlinux_kernelMatch3.4.8

linuxlinux_kernelMatch3.4.9

linuxlinux_kernelMatch3.4.10

linuxlinux_kernelMatch3.4.11

linuxlinux_kernelMatch3.4.12

linuxlinux_kernelMatch3.4.13

linuxlinux_kernelMatch3.4.14

linuxlinux_kernelMatch3.4.15

linuxlinux_kernelMatch3.4.16

linuxlinux_kernelMatch3.4.17

linuxlinux_kernelMatch3.4.18

linuxlinux_kernelMatch3.4.19

linuxlinux_kernelMatch3.4.20

linuxlinux_kernelMatch3.4.21

linuxlinux_kernelMatch3.4.22

linuxlinux_kernelMatch3.4.23

linuxlinux_kernelMatch3.4.24

linuxlinux_kernelMatch3.4.25

linuxlinux_kernelMatch3.4.26

linuxlinux_kernelMatch3.4.27

linuxlinux_kernelMatch3.4.28

linuxlinux_kernelMatch3.4.29

linuxlinux_kernelMatch3.4.30

linuxlinux_kernelMatch3.4.31

linuxlinux_kernelMatch3.4.32

linuxlinux_kernelMatch3.5.1

linuxlinux_kernelMatch3.5.2

linuxlinux_kernelMatch3.5.3

linuxlinux_kernelMatch3.5.4

linuxlinux_kernelMatch3.5.5

linuxlinux_kernelMatch3.5.6

linuxlinux_kernelMatch3.5.7

linuxlinux_kernelMatch3.6

linuxlinux_kernelMatch3.6.1

linuxlinux_kernelMatch3.6.2

linuxlinux_kernelMatch3.6.3

linuxlinux_kernelMatch3.6.4

linuxlinux_kernelMatch3.6.5

linuxlinux_kernelMatch3.6.6

linuxlinux_kernelMatch3.6.7

linuxlinux_kernelMatch3.6.8

linuxlinux_kernelMatch3.6.9

linuxlinux_kernelMatch3.6.10

linuxlinux_kernelMatch3.6.11

linuxlinux_kernelMatch3.7

linuxlinux_kernelMatch3.7.1

linuxlinux_kernelMatch3.7.2

linuxlinux_kernelMatch3.7.3

linuxlinux_kernelMatch3.7.4

linuxlinux_kernelMatch3.7.5

linuxlinux_kernelMatch3.7.6

linuxlinux_kernelMatch3.7.7

linuxlinux_kernelMatch3.7.8

linuxlinux_kernelMatch3.7.9

linuxlinux_kernelMatch3.7.10

linuxlinux_kernelMatch3.8.0

linuxlinux_kernelMatch3.8.1

linuxlinux_kernelMatch3.8.2

linuxlinux_kernelMatch3.8.3

linuxlinux_kernelMatch3.8.4

linuxlinux_kernelMatch3.8.5

linuxlinux_kernelMatch3.8.6

linuxlinux_kernelMatch3.8.7

linuxlinux_kernelMatch3.8.8

linuxlinux_kernelMatch3.8.9

linuxlinux_kernelMatch3.8.10

linuxlinux_kernelMatch3.8.11

linuxlinux_kernelMatch3.8.12

linuxlinux_kernelMatch3.8.13

linuxlinux_kernelMatch3.9rc1

linuxlinux_kernelMatch3.9rc2

linuxlinux_kernelMatch3.9rc3

linuxlinux_kernelMatch3.9rc4

linuxlinux_kernelMatch3.9rc5

linuxlinux_kernelMatch3.9rc6

linuxlinux_kernelMatch3.9rc7

linuxlinux_kernelMatch3.9.0

linuxlinux_kernelMatch3.9.1

linuxlinux_kernelMatch3.9.2

linuxlinux_kernelMatch3.9.3

linuxlinux_kernelMatch3.9.4

linuxlinux_kernelMatch3.9.5

linuxlinux_kernelMatch3.9.6

linuxlinux_kernelMatch3.9.7

linuxlinux_kernelMatch3.9.8

linuxlinux_kernelMatch3.9.9

linuxlinux_kernelMatch3.9.10

linuxlinux_kernelMatch3.9.11

linuxlinux_kernelMatch3.10.1

linuxlinux_kernelMatch3.10.2

linuxlinux_kernelMatch3.10.3

linuxlinux_kernelMatch3.10.4

linuxlinux_kernelMatch3.10.5

linuxlinux_kernelMatch3.10.6

linuxlinux_kernelMatch3.10.7

linuxlinux_kernelMatch3.10.8

linuxlinux_kernelMatch3.10.9

linuxlinux_kernelMatch3.10.10

linuxlinux_kernelMatch3.10.11

linuxlinux_kernelMatch3.10.12

linuxlinux_kernelMatch3.10.13

linuxlinux_kernelMatch3.10.14

linuxlinux_kernelMatch3.10.15

linuxlinux_kernelMatch3.10.16

linuxlinux_kernelMatch3.10.17

linuxlinux_kernelMatch3.10.18

linuxlinux_kernelMatch3.10.19

linuxlinux_kernelMatch3.10.20

linuxlinux_kernelMatch3.10.21

linuxlinux_kernelMatch3.10.22

linuxlinux_kernelMatch3.10.23

linuxlinux_kernelMatch3.11

linuxlinux_kernelMatch3.11.1

linuxlinux_kernelMatch3.11.2

linuxlinux_kernelMatch3.11.3

linuxlinux_kernelMatch3.11.4

linuxlinux_kernelMatch3.11.5

linuxlinux_kernelMatch3.11.6

linuxlinux_kernelMatch3.11.7

linuxlinux_kernelMatch3.11.8

linuxlinux_kernelMatch3.11.9

linuxlinux_kernelMatch3.11.10

linuxlinux_kernelMatch3.12

linuxlinux_kernelMatch3.12.1

linuxlinux_kernelMatch3.12.2

References

git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=bceaa90240b6019ed73b49965eac7d167610be69

lists.opensuse.org/opensuse-security-announce/2014-03/msg00026.html

lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html

lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html

lists.opensuse.org/opensuse-security-announce/2015-04/msg00000.html

lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html

rhn.redhat.com/errata/RHSA-2014-0159.html

rhn.redhat.com/errata/RHSA-2014-0285.html

seclists.org/oss-sec/2014/q1/29

secunia.com/advisories/55882

secunia.com/advisories/56036

www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.12.4

www.openwall.com/lists/oss-security/2013/11/28/13

www.ubuntu.com/usn/USN-2107-1

www.ubuntu.com/usn/USN-2108-1

www.ubuntu.com/usn/USN-2109-1

www.ubuntu.com/usn/USN-2110-1

www.ubuntu.com/usn/USN-2113-1

www.ubuntu.com/usn/USN-2117-1

www.ubuntu.com/usn/USN-2135-1

www.ubuntu.com/usn/USN-2136-1

www.ubuntu.com/usn/USN-2138-1

www.ubuntu.com/usn/USN-2139-1

www.ubuntu.com/usn/USN-2141-1

bugzilla.redhat.com/show_bug.cgi?id=1035875

github.com/torvalds/linux/commit/bceaa90240b6019ed73b49965eac7d167610be69

4.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:C/I:N/A:N

7.2 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.1%

JSON

Related for NVD:CVE-2013-7263

f52 ubuntucve1 debiancve1 prion2 veracode7 cve2 cvelist1 openvas68 nessus48 oraclelinux6 centos2 redhat3 amazon1 ubuntu11 nvd1 suse17 securityvulns2 debian1 osv1