PT-2014-3315

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.12.4 Description The issue allows local users to obtain sensitive information from kernel stack memory. This is due to the l2tp ip recvmsg function updating a certain length value before ensuring that an...

PT-2013-6045 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.12.4 Description: The issue is related to the ping recvmsg function in the Linux kernel, which does not properly interact with read system calls on ping sockets. This allows local users with unspecified...

PT-2014-3314

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.12.4 Description The issue allows local users to obtain sensitive information from kernel stack memory. This can be achieved via certain system calls, including 1 recvfrom, 2 recvmmsg, or 3 recvmsg, related to...

PT-2014-3318

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.12.4 Description The issue allows local users to obtain sensitive information from kernel memory. This is possible due to the ipx recvmsg function updating a certain length value without ensuring that an...

PT-2014-3317

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.12.4 Description The issue allows local users to obtain sensitive information from kernel memory. This is possible due to the atalk recvmsg function in net/appletalk/ddp.c updating a certain length value withou...

PT-2014-3316

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.12.4 Description The issue allows local users to obtain sensitive information from kernel memory. This can be achieved through certain system calls, including recvfrom, recvmmsg, or recvmsg. The mISDN sock...

PT-2014-3319

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.12.4 Description The issue allows local users to obtain sensitive information from kernel memory. This can be achieved via certain system calls, including recvfrom, recvmmsg, or recvmsg. The nr recvmsg function...

PT-2014-3320

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.12.4 Description The issue allows local users to obtain sensitive information from kernel memory. This is achieved through the packet recvmsg function, which updates a certain length value before ensuring that ...

PT-2014-3321

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.12.4 Description The issue allows local users to obtain sensitive information from kernel memory. This is possible due to the x25 recvmsg function updating a certain length value without ensuring that an...

PT-2014-3330

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.12.4 Description The issue allows local users to obtain sensitive information from kernel stack memory. This can be achieved via certain system calls, including recvfrom, recvmmsg, or recvmsg. The dgram recvmsg...

PT-2014-1022

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.12.4 Description The issue allows local users to obtain sensitive information from kernel stack memory. This is due to the pn recvmsg function updating a certain length value before ensuring that an associated...

Kernel: llc: Fix missing msg_namelen update in llc_ui_recvmsg

The llcuirecvmsg function in net/llc/afllc.c in the Linux kernel before 3.9-rc7 does not initialize a certain length variable, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call...

openSUSE: Security Advisory for 3.0.80 (openSUSE-SU-2013:1187-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 5 / 6 : unbreakable enterprise kernel (ELSA-2013-2538)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-2538 advisory. - Bluetooth: RFCOMM - Fix missing msgnamelen update in rfcommsockrecvmsg Mathias Krause Orabug: 17173830 CVE-2013-3225 - Bluetooth: fix possible in...

SuSE 11.3 Security Update : Linux kernel (SAT Patch Numbers 7991 / 7992 / 7994)

The SUSE Linux Enterprise 11 Service Pack 3 kernel has been updated to 3.0.82 and to fix various bugs and security issues. The following security issues have been fixed : - The chaseport function in drivers/usb/serial/ioti.c in the Linux kernel allowed local users to cause a denial of service NUL...

Kernel: atm: update msg_namelen in vcc_recvmsg()

The vccrecvmsg function in net/atm/common.c in the Linux kernel before 3.9-rc7 does not initialize a certain length variable, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call...

Kernel: Bluetooth: possible info leak in bt_sock_recvmsg()

The btsockrecvmsg function in net/bluetooth/afbluetooth.c in the Linux kernel before 3.9-rc7 does not properly initialize a certain length variable, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call...

Kernel: Bluetooth: RFCOMM - missing msg_namelen update in rfcomm_sock_recvmsg

The rfcommsockrecvmsg function in net/bluetooth/rfcomm/sock.c in the Linux kernel before 3.9-rc7 does not initialize a certain length variable, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call...

Kernel: Bluetooth: RFCOMM - missing msg_namelen update in rfcomm_sock_recvmsg

The rfcommsockrecvmsg function in net/bluetooth/rfcomm/sock.c in the Linux kernel before 3.9-rc7 does not initialize a certain length variable, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call...

Kernel: Bluetooth: possible info leak in bt_sock_recvmsg()

The btsockrecvmsg function in net/bluetooth/afbluetooth.c in the Linux kernel before 3.9-rc7 does not properly initialize a certain length variable, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call...