Lucene search

K
ubuntucveUbuntu.comUB:CVE-2012-6543
HistoryMar 15, 2013 - 12:00 a.m.

CVE-2012-6543

2013-03-1500:00:00
ubuntu.com
ubuntu.com
11

1.9 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

35.4%

The l2tp_ip6_getname function in net/l2tp/l2tp_ip6.c in the Linux kernel
before 3.6 does not initialize a certain structure member, which allows
local users to obtain sensitive information from kernel stack memory via a
crafted application.

Bugs

1.9 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

35.4%

Related for UB:CVE-2012-6543