CVE-2013-3231

Published: Apr 22, 2013Modified: Apr 29, 2026

4.7

Vector

AV:L/AC:M/Au:N/C:C/I:N/A:N

Exploitability: 3.4 / Impact: 6.9

Source: NVD

Description

The llc_ui_recvmsg function in net/llc/af_llc.c in the Linux kernel before 3.9-rc7 does not initialize a certain length variable, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call.

Affected (6)

Products: Linux: Linux Kernel

1 product

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Up to 3.9
Linux Linux Kernel	Version 3.9 rc1
Linux Linux Kernel	Version 3.9 rc2
Linux Linux Kernel	Version 3.9 rc3
Linux Linux Kernel	Version 3.9 rc4
Linux Linux Kernel	Version 3.9 rc5

Related CWEs

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (24)

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=c77a4b9cffb6215a15196ec499490d116dfad181

Source: cve@mitre.org

http://lists.fedoraproject.org/pipermail/package-announce/2013-April/103750.html

Source: cve@mitre.org

http://lists.fedoraproject.org/pipermail/package-announce/2013-May/104480.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00016.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00018.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html

Source: cve@mitre.org

http://rhn.redhat.com/errata/RHSA-2013-1645.html

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDVSA-2013:176

Source: cve@mitre.org

http://www.openwall.com/lists/oss-security/2013/04/14/3

Source: cve@mitre.org

http://www.ubuntu.com/usn/USN-1837-1

Source: cve@mitre.org

https://github.com/torvalds/linux/commit/c77a4b9cffb6215a15196ec499490d116dfad181

Source: cve@mitre.org

Vendor Advisory

https://lkml.org/lkml/2013/4/14/107

Source: cve@mitre.org

Vendor Advisory

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=c77a4b9cffb6215a15196ec499490d116dfad181

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.fedoraproject.org/pipermail/package-announce/2013-April/103750.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.fedoraproject.org/pipermail/package-announce/2013-May/104480.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00016.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00018.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2013-1645.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2013:176

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2013/04/14/3

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-1837-1

Source: af854a3a-2127-422b-91ae-364da2661108

https://github.com/torvalds/linux/commit/c77a4b9cffb6215a15196ec499490d116dfad181

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://lkml.org/lkml/2013/4/14/107

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.