CVE-2013-3235: Exposure of Sensitive Information to an Unauthorized Actor

net/tipc/socket.c in the Linux kernel before 3.9-rc7 does not initialize a certain data structure and a certain length variable, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call...

UBUNTU-CVE-2013-3225

The rfcommsockrecvmsg function in net/bluetooth/rfcomm/sock.c in the Linux kernel before 3.9-rc7 does not initialize a certain length variable, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call...

UBUNTU-CVE-2013-3076

The crypto API in the Linux kernel through 3.9-rc8 does not initialize certain length variables, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call, related to the hashrecvmsg function in crypto/algifhash.c and the...

UBUNTU-CVE-2013-3226

The scosockrecvmsg function in net/bluetooth/sco.c in the Linux kernel before 3.9-rc7 does not initialize a certain length variable, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call...

UBUNTU-CVE-2013-3232

The nrrecvmsg function in net/netrom/afnetrom.c in the Linux kernel before 3.9-rc7 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call...

UBUNTU-CVE-2013-3234

The roserecvmsg function in net/rose/afrose.c in the Linux kernel before 3.9-rc7 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call...

UBUNTU-CVE-2013-3233

The llcpsockrecvmsg function in net/nfc/llcp/sock.c in the Linux kernel before 3.9-rc7 does not initialize a certain length variable and a certain data structure, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call...

UBUNTU-CVE-2013-3224

The btsockrecvmsg function in net/bluetooth/afbluetooth.c in the Linux kernel before 3.9-rc7 does not properly initialize a certain length variable, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call...

UBUNTU-CVE-2013-3222

The vccrecvmsg function in net/atm/common.c in the Linux kernel before 3.9-rc7 does not initialize a certain length variable, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call...

PT-2013-1110

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.9-rc7 Debian GNU/Linux affected versions not specified Description The issue concerns multiple vulnerabilities in the Linux package of the Debian GNU/Linux operating system, which can be exploited by a local...

PT-2013-1104

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.9-rc7 Description The issue allows local users to obtain sensitive information from kernel stack memory. This is due to the ax25 recvmsg function in net/ax25/af ax25.c not initializing a certain data structure,...

PT-2013-1108

Name of the Vulnerable Software and Affected Versions Debian GNU/Linux affected versions not specified Linux kernel versions prior to 3.9-rc7 Description The issue concerns multiple vulnerabilities in the Linux package of the Debian GNU/Linux operating system, which can be exploited by a local...

PT-2013-1105

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.9-rc7 Description The issue allows local users to obtain sensitive information from kernel stack memory. This is due to the bt sock recvmsg function in net/bluetooth/af bluetooth.c not properly initializing a...

PT-2013-1106

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.9-rc7 Debian GNU/Linux affected versions not specified Description The issue concerns multiple vulnerabilities in the Linux operating system package, specifically in the Debian GNU/Linux and the Linux kernel...

PT-2013-1109

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.9-rc7 Description The issue concerns multiple vulnerabilities in the Linux operating system, specifically in the Debian GNU/Linux package, which can be exploited by a local attacker to compromise the...

PT-2013-1102

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.9-rc8 Description The issue concerns the crypto API in the Linux kernel, where certain length variables are not properly initialized. This allows local users to obtain sensitive information from the kernel stac...

PT-2013-1107

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.9-rc7 Description The issue allows local users to obtain sensitive information from kernel stack memory. This is due to the caif seqpkt recvmsg function in net/caif/caif socket.c not initializing a certain leng...

PT-2013-1103

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.9-rc7 Debian GNU/Linux affected versions not specified Description The issue affects the Linux kernel and Debian GNU/Linux operating system, allowing a local attacker to exploit multiple vulnerabilities,...

PT-2013-1111

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.9-rc7 Description The issue allows local users to obtain sensitive information from kernel stack memory. This is due to the rose recvmsg function in net/rose/af rose.c not initializing a certain data structure,...

CVE-2012-3430

The rdsrecvmsg function in net/rds/recv.c in the Linux kernel before 3.0.44 does not initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via a 1 recvfrom or 2 recvmsg system call on an RDS socket...