CVE-2013-3236

EUVD-2013-3174
The vmci_transport_dgram_dequeue function in net/vmw_vsock/vmci_transport.c in the Linux kernel before 3.9-rc7 does not properly initialize a certain length variable, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.9 UNKNOWN
LOCAL
LOW
AV:L/AC:L/Au:N/C:C/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 16%
Affected Products (NVD)
VendorProductVersion
linuxlinux_kernel
𝑥
≤ 3.9
linuxlinux_kernel
3.9:rc1
linuxlinux_kernel
3.9:rc2
linuxlinux_kernel
3.9:rc3
linuxlinux_kernel
3.9:rc4
linuxlinux_kernel
3.9:rc5
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
linux
bookworm
6.1.106-3
fixed
bookworm (security)
6.1.112-1
fixed
bullseye
5.10.223-1
fixed
bullseye (security)
5.10.226-1
fixed
sid
6.11.6-1
fixed
trixie
6.11.5-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
linux
hardy
not-affected
lucid
not-affected
oneiric
not-affected
precise
not-affected
quantal
not-affected
raring
not-affected
linux-armadaxp
hardy
dne
lucid
dne
oneiric
dne
precise
not-affected
quantal
not-affected
raring
dne
linux-ec2
hardy
dne
lucid
not-affected
oneiric
dne
precise
dne
quantal
dne
raring
dne
linux-fsl-imx51
hardy
dne
lucid
ignored
oneiric
dne
precise
dne
quantal
dne
raring
dne
linux-linaro-omap
hardy
dne
lucid
dne
oneiric
ignored
precise
ignored
quantal
ignored
raring
dne
linux-linaro-shared
hardy
dne
lucid
dne
oneiric
ignored
precise
ignored
quantal
ignored
raring
dne
linux-linaro-vexpress
hardy
dne
lucid
dne
oneiric
ignored
precise
ignored
quantal
ignored
raring
dne
linux-lts-backport-maverick
hardy
dne
lucid
ignored
oneiric
dne
precise
dne
quantal
dne
raring
dne
linux-lts-backport-oneiric
hardy
dne
lucid
not-affected
oneiric
dne
precise
dne
quantal
dne
raring
dne
linux-lts-quantal
hardy
dne
lucid
dne
oneiric
dne
precise
not-affected
quantal
dne
raring
dne
linux-lts-raring
hardy
dne
lucid
dne
oneiric
dne
precise
not-affected
quantal
dne
raring
dne
linux-mvl-dove
hardy
dne
lucid
ignored
oneiric
dne
precise
dne
quantal
dne
raring
dne
linux-qcm-msm
hardy
dne
lucid
ignored
oneiric
ignored
precise
ignored
quantal
ignored
raring
dne
linux-ti-omap4
hardy
dne
lucid
dne
oneiric
not-affected
precise
not-affected
quantal
not-affected
raring
not-affected
Common Weakness Enumeration
References
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=680d04e0ba7e926233e3b9cee59125ce181f66ba
http://www.openwall.com/lists/oss-security/2013/04/14/3
http://www.openwall.com/lists/oss-security/2013/04/22/11
http://www.openwall.com/lists/oss-security/2013/04/22/13
http://www.openwall.com/lists/oss-security/2013/04/22/14
http://www.openwall.com/lists/oss-security/2013/04/22/3
http://www.openwall.com/lists/oss-security/2013/04/23/2
http://www.securityfocus.com/bid/59391
http://xforce.iss.net/xforce/xfdb/83698
https://github.com/torvalds/linux/commit/680d04e0ba7e926233e3b9cee59125ce181f66ba
https://lkml.org/lkml/2013/4/14/107
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=680d04e0ba7e926233e3b9cee59125ce181f66ba
http://www.openwall.com/lists/oss-security/2013/04/14/3
http://www.openwall.com/lists/oss-security/2013/04/22/11
http://www.openwall.com/lists/oss-security/2013/04/22/13
http://www.openwall.com/lists/oss-security/2013/04/22/14
http://www.openwall.com/lists/oss-security/2013/04/22/3
http://www.openwall.com/lists/oss-security/2013/04/23/2
http://www.securityfocus.com/bid/59391
http://xforce.iss.net/xforce/xfdb/83698
https://github.com/torvalds/linux/commit/680d04e0ba7e926233e3b9cee59125ce181f66ba
https://lkml.org/lkml/2013/4/14/107