CVE-2013-3233

Published: Apr 22, 2013Modified: Apr 29, 2026

4.9

Vector

AV:L/AC:L/Au:N/C:C/I:N/A:N

Exploitability: 3.9 / Impact: 6.9

Source: NVD

Description

The llcp_sock_recvmsg function in net/nfc/llcp/sock.c in the Linux kernel before 3.9-rc7 does not initialize a certain length variable and a certain data structure, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call.

Affected (6)

Products: Linux: Linux Kernel

1 product

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Up to 3.9
Linux Linux Kernel	Version 3.9 rc1
Linux Linux Kernel	Version 3.9 rc2
Linux Linux Kernel	Version 3.9 rc3
Linux Linux Kernel	Version 3.9 rc4
Linux Linux Kernel	Version 3.9 rc5

Related CWEs

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (18)

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d26d6504f23e803824e8ebd14e52d4fc0a0b09cb

Source: cve@mitre.org

http://lists.fedoraproject.org/pipermail/package-announce/2013-April/103750.html

Source: cve@mitre.org

http://lists.fedoraproject.org/pipermail/package-announce/2013-May/104480.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDVSA-2013:176

Source: cve@mitre.org

http://www.openwall.com/lists/oss-security/2013/04/14/3

Source: cve@mitre.org

http://www.ubuntu.com/usn/USN-1837-1

Source: cve@mitre.org

https://github.com/torvalds/linux/commit/d26d6504f23e803824e8ebd14e52d4fc0a0b09cb

Source: cve@mitre.org

Vendor Advisory

https://lkml.org/lkml/2013/4/14/107

Source: cve@mitre.org

Vendor Advisory

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d26d6504f23e803824e8ebd14e52d4fc0a0b09cb

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.fedoraproject.org/pipermail/package-announce/2013-April/103750.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.fedoraproject.org/pipermail/package-announce/2013-May/104480.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2013:176

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2013/04/14/3

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-1837-1

Source: af854a3a-2127-422b-91ae-364da2661108

https://github.com/torvalds/linux/commit/d26d6504f23e803824e8ebd14e52d4fc0a0b09cb

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://lkml.org/lkml/2013/4/14/107

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.