CVE-2012-3430

Published: Oct 3, 2012Modified: Apr 29, 2026

2.1

Vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

The rds_recvmsg function in net/rds/recv.c in the Linux kernel before 3.0.44 does not initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via a (1) recvfrom or (2) recvmsg system call on an RDS socket.

Affected (43)

Products: Linux: Linux Kernel

1 product

Configuration A

43 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Up to 3.0.43
Linux Linux Kernel	Version 3.0.10
Linux Linux Kernel	Version 3.0.11
Linux Linux Kernel	Version 3.0.12
Linux Linux Kernel	Version 3.0.13
Linux Linux Kernel	Version 3.0.14
Linux Linux Kernel	Version 3.0.15
Linux Linux Kernel	Version 3.0.16
Linux Linux Kernel	Version 3.0.17
Linux Linux Kernel	Version 3.0.18
Linux Linux Kernel	Version 3.0.19
Linux Linux Kernel	Version 3.0.1
Linux Linux Kernel	Version 3.0.20
Linux Linux Kernel	Version 3.0.21
Linux Linux Kernel	Version 3.0.22
Linux Linux Kernel	Version 3.0.23
Linux Linux Kernel	Version 3.0.24
Linux Linux Kernel	Version 3.0.25
Linux Linux Kernel	Version 3.0.26
Linux Linux Kernel	Version 3.0.27
Linux Linux Kernel	Version 3.0.28
Linux Linux Kernel	Version 3.0.29
Linux Linux Kernel	Version 3.0.2
Linux Linux Kernel	Version 3.0.30
Linux Linux Kernel	Version 3.0.31
Linux Linux Kernel	Version 3.0.32
Linux Linux Kernel	Version 3.0.33
Linux Linux Kernel	Version 3.0.34
Linux Linux Kernel	Version 3.0.35
Linux Linux Kernel	Version 3.0.36
Linux Linux Kernel	Version 3.0.37
Linux Linux Kernel	Version 3.0.38
Linux Linux Kernel	Version 3.0.39
Linux Linux Kernel	Version 3.0.3
Linux Linux Kernel	Version 3.0.40
Linux Linux Kernel	Version 3.0.41
Linux Linux Kernel	Version 3.0.42
Linux Linux Kernel	Version 3.0.4
Linux Linux Kernel	Version 3.0.5
Linux Linux Kernel	Version 3.0.6
Linux Linux Kernel	Version 3.0.7
Linux Linux Kernel	Version 3.0.8
Linux Linux Kernel	Version 3.0.9

Related CWEs

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (36)

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=06b6a1cf6e776426766298d055bb3991957d90a7

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2012-1323.html

Source: secalert@redhat.com

http://secunia.com/advisories/50633

Source: secalert@redhat.com

http://secunia.com/advisories/50732

Source: secalert@redhat.com

http://secunia.com/advisories/50811

Source: secalert@redhat.com

http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.0.44

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2012/07/26/5

Source: secalert@redhat.com

http://www.ubuntu.com/usn/USN-1567-1

Source: secalert@redhat.com

http://www.ubuntu.com/usn/USN-1568-1

Source: secalert@redhat.com

http://www.ubuntu.com/usn/USN-1572-1

Source: secalert@redhat.com

http://www.ubuntu.com/usn/USN-1575-1

Source: secalert@redhat.com

http://www.ubuntu.com/usn/USN-1577-1

Source: secalert@redhat.com

http://www.ubuntu.com/usn/USN-1578-1

Source: secalert@redhat.com

http://www.ubuntu.com/usn/USN-1579-1

Source: secalert@redhat.com

http://www.ubuntu.com/usn/USN-1580-1

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=820039

Source: secalert@redhat.com

https://github.com/torvalds/linux/commit/06b6a1cf6e776426766298d055bb3991957d90a7

Source: secalert@redhat.com

Exploit

https://www.suse.com/support/update/announcement/2012/suse-su-20121679-1.html

Source: secalert@redhat.com

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=06b6a1cf6e776426766298d055bb3991957d90a7

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2012-1323.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/50633

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/50732

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/50811

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.0.44

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2012/07/26/5

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-1567-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-1568-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-1572-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-1575-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-1577-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-1578-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-1579-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-1580-1

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/show_bug.cgi?id=820039

Source: af854a3a-2127-422b-91ae-364da2661108

https://github.com/torvalds/linux/commit/06b6a1cf6e776426766298d055bb3991957d90a7

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

https://www.suse.com/support/update/announcement/2012/suse-su-20121679-1.html

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.