CVE-2013-3228

Published: Apr 22, 2013Modified: Apr 29, 2026

4.9

Vector

AV:L/AC:L/Au:N/C:C/I:N/A:N

Exploitability: 3.9 / Impact: 6.9

Source: NVD

Description

The irda_recvmsg_dgram function in net/irda/af_irda.c in the Linux kernel before 3.9-rc7 does not initialize a certain length variable, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call.

Affected (6)

Products: Linux: Linux Kernel

1 product

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Up to 3.9
Linux Linux Kernel	Version 3.9 rc1
Linux Linux Kernel	Version 3.9 rc2
Linux Linux Kernel	Version 3.9 rc3
Linux Linux Kernel	Version 3.9 rc4
Linux Linux Kernel	Version 3.9 rc5

Related CWEs

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (22)

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=5ae94c0d2f0bed41d6718be743985d61b7f5c47d

Source: cve@mitre.org

http://lists.fedoraproject.org/pipermail/package-announce/2013-April/103750.html

Source: cve@mitre.org

http://lists.fedoraproject.org/pipermail/package-announce/2013-May/104480.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00016.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00018.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDVSA-2013:176

Source: cve@mitre.org

http://www.openwall.com/lists/oss-security/2013/04/14/3

Source: cve@mitre.org

http://www.ubuntu.com/usn/USN-1837-1

Source: cve@mitre.org

https://github.com/torvalds/linux/commit/5ae94c0d2f0bed41d6718be743985d61b7f5c47d

Source: cve@mitre.org

https://lkml.org/lkml/2013/4/14/107

Source: cve@mitre.org

Vendor Advisory

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=5ae94c0d2f0bed41d6718be743985d61b7f5c47d

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.fedoraproject.org/pipermail/package-announce/2013-April/103750.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.fedoraproject.org/pipermail/package-announce/2013-May/104480.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00016.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00018.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2013:176

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2013/04/14/3

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-1837-1

Source: af854a3a-2127-422b-91ae-364da2661108

https://github.com/torvalds/linux/commit/5ae94c0d2f0bed41d6718be743985d61b7f5c47d

Source: af854a3a-2127-422b-91ae-364da2661108

https://lkml.org/lkml/2013/4/14/107

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.