CVE-2013-3236

Published: Apr 22, 2013Modified: Apr 29, 2026

4.9

Vector

AV:L/AC:L/Au:N/C:C/I:N/A:N

Exploitability: 3.9 / Impact: 6.9

Source: NVD

Description

The vmci_transport_dgram_dequeue function in net/vmw_vsock/vmci_transport.c in the Linux kernel before 3.9-rc7 does not properly initialize a certain length variable, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call.

Affected (6)

Products: Linux: Linux Kernel

1 product

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Up to 3.9
Linux Linux Kernel	Version 3.9 rc1
Linux Linux Kernel	Version 3.9 rc2
Linux Linux Kernel	Version 3.9 rc3
Linux Linux Kernel	Version 3.9 rc4
Linux Linux Kernel	Version 3.9 rc5

Related CWEs

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (22)

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=680d04e0ba7e926233e3b9cee59125ce181f66ba

Source: cve@mitre.org

http://www.openwall.com/lists/oss-security/2013/04/14/3

Source: cve@mitre.org

http://www.openwall.com/lists/oss-security/2013/04/22/11

Source: cve@mitre.org

http://www.openwall.com/lists/oss-security/2013/04/22/13

Source: cve@mitre.org

http://www.openwall.com/lists/oss-security/2013/04/22/14

Source: cve@mitre.org

http://www.openwall.com/lists/oss-security/2013/04/22/3

Source: cve@mitre.org

http://www.openwall.com/lists/oss-security/2013/04/23/2

Source: cve@mitre.org

http://www.securityfocus.com/bid/59391

Source: cve@mitre.org

http://xforce.iss.net/xforce/xfdb/83698

Source: cve@mitre.org

https://github.com/torvalds/linux/commit/680d04e0ba7e926233e3b9cee59125ce181f66ba

Source: cve@mitre.org

Vendor Advisory

https://lkml.org/lkml/2013/4/14/107

Source: cve@mitre.org

Vendor Advisory

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=680d04e0ba7e926233e3b9cee59125ce181f66ba

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2013/04/14/3

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2013/04/22/11

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2013/04/22/13

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2013/04/22/14

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2013/04/22/3

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2013/04/23/2

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/59391

Source: af854a3a-2127-422b-91ae-364da2661108

http://xforce.iss.net/xforce/xfdb/83698

Source: af854a3a-2127-422b-91ae-364da2661108

https://github.com/torvalds/linux/commit/680d04e0ba7e926233e3b9cee59125ce181f66ba

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://lkml.org/lkml/2013/4/14/107

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.