| ID | CVE-2013-3076 | ||||||
| Sažetak | The crypto API in the Linux kernel through 3.9-rc8 does not initialize certain length variables, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call, related to the hash_recvmsg function in crypto/algif_hash.c and the skcipher_recvmsg function in crypto/algif_skcipher.c. | ||||||
| Reference |
|
||||||
| CVSS |
|
||||||
| Pristup |
|
||||||
| Impact |
|
||||||
| CVSS vektor | AV:L/AC:L/Au:N/C:C/I:N/A:N | ||||||
| Zadnje važnije ažuriranje | 29-11-2017 - 02:29 | ||||||
| Objavljeno | 22-04-2013 - 11:40 |
