CVE-2013-7263

2014-01-0600:00:00

ubuntu.com

4.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:C/I:N/A:N

0.0004 Low

EPSS

Percentile

9.3%

JSON

The Linux kernel before 3.12.4 updates certain length values before
ensuring that associated data structures have been initialized, which
allows local users to obtain sensitive information from kernel stack memory
via a (1) recvfrom, (2) recvmmsg, or (3) recvmsg system call, related to
net/ipv4/ping.c, net/ipv4/raw.c, net/ipv4/udp.c, net/ipv6/raw.c, and
net/ipv6/udp.c.

Bugs

<https://launchpad.net/bugs/1267075>

OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchlinux< 2.6.32-56.118UNKNOWN
ubuntu12.04noarchlinux< 3.2.0-59.90UNKNOWN
ubuntu12.10noarchlinux< 3.5.0-47.71UNKNOWN
ubuntu13.10noarchlinux< 3.11.0-17.31UNKNOWN
ubuntu12.04noarchlinux-armadaxp< 3.2.0-1630.42UNKNOWN
ubuntu12.10noarchlinux-armadaxp< 3.5.0-1628.37UNKNOWN
ubuntu10.04noarchlinux-ec2< 2.6.32-361.74UNKNOWN
ubuntu12.04noarchlinux-lts-quantal< 3.5.0-47.71~precise1UNKNOWN
ubuntu12.04noarchlinux-lts-raring< 3.8.0-37.53~precise1UNKNOWN
ubuntu12.04noarchlinux-lts-saucy< 3.11.0-17.31~precise1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	10.04	noarch	linux	< 2.6.32-56.118	UNKNOWN
ubuntu	12.04	noarch	linux	< 3.2.0-59.90	UNKNOWN
ubuntu	12.10	noarch	linux	< 3.5.0-47.71	UNKNOWN
ubuntu	13.10	noarch	linux	< 3.11.0-17.31	UNKNOWN
ubuntu	12.04	noarch	linux-armadaxp	< 3.2.0-1630.42	UNKNOWN
ubuntu	12.10	noarch	linux-armadaxp	< 3.5.0-1628.37	UNKNOWN
ubuntu	10.04	noarch	linux-ec2	< 2.6.32-361.74	UNKNOWN
ubuntu	12.04	noarch	linux-lts-quantal	< 3.5.0-47.71~precise1	UNKNOWN
ubuntu	12.04	noarch	linux-lts-raring	< 3.8.0-37.53~precise1	UNKNOWN
ubuntu	12.04	noarch	linux-lts-saucy	< 3.11.0-17.31~precise1	UNKNOWN