The ccid3_hc_tx_getsockopt function in net/dccp/ccids/ccid3.c in the Linux kernel before 3.6 does not initialize a certain structure, which allows local users to obtain sensitive information from kernel stack memory via a crafted application.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 15, 2013 |
| Suse | — | Upgrade btrfs-kmp-paeUpgrade xen-kmp-paeUpgrade kernel-pae-baseUpgrade ext4dev-kmp-paeUpgrade ext4dev-kmp-defaultUpgrade kernel-traceUpgrade hyper-v-kmp-traceUpgrade ext4dev-kmp-traceUpgrade kernel-sourceUpgrade kernel-default-manUpgrade kernel-ec2-baseUpgrade ext4dev-kmp-xenUpgrade kernel-default-baseUpgrade kernel-defaultUpgrade kernel-pae-develUpgrade hyper-v-kmp-paeUpgrade kernel-ec2Upgrade btrfs-kmp-xenUpgrade xen-kmp-traceUpgrade kernel-symsUpgrade kernel-xenUpgrade kernel-default-develUpgrade hyper-v-kmp-defaultUpgrade btrfs-kmp-defaultUpgrade kernel-trace-baseUpgrade kernel-paeUpgrade xen-kmp-defaultUpgrade kernel-trace-develUpgrade kernel-xen-develUpgrade kernel-xen-baseUpgrade kernel-ec2-devel | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade linux-image-3.0.0-28-omapUpgrade linux-image-3.0.0-28-serverUpgrade linux-image-3.2.0-32-powerpc64-smpUpgrade linux-image-3.0.0-28-generic-paeUpgrade linux-image-3.2.0-32-omapUpgrade linux-image-3.2.0-1420-omap4Upgrade linux-image-3.2.0-32-powerpc-smpUpgrade linux-image-3.2.0-32-highbankUpgrade linux-image-3.0.0-28-genericUpgrade linux-image-3.0.0-28-powerpc64-smpUpgrade linux-image-3.2.0-32-genericUpgrade linux-image-3.2.0-32-virtualUpgrade linux-image-3.2.0-32-generic-paeUpgrade linux-image-3.0.0-28-powerpc-smpUpgrade linux-image-3.0.0-28-powerpcUpgrade linux-image-3.0.0-28-virtualUpgrade linux-image-3.0.0-1218-omap4 | Nov 8, 2024 | Mar 15, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub