NVD

Id
38240  
Name
CVE-2013-2141  
Description
The do_tkill function in kernel/signal.c in the Linux kernel before 3.8.9 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel memory via a crafted application that makes a (1) tkill or (2) tgkill system call.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-18  
Published
2013-06-07  
Modified Date
2014-01-03  
Seq
2013-2141  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
195540 38240 CVE-2013-2141 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=b9e146d8eb3b9ecae5086d373b50fa0c1f3e7f0f  View
195541 38240 CVE-2013-2141 openSUSE-SU-2013:1971  View
195542 38240 CVE-2013-2141 DSA-2766  View
195543 38240 CVE-2013-2141 http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.8.9  View
195544 38240 CVE-2013-2141 MDVSA-2013:176  View
195545 38240 CVE-2013-2141 [oss-security] 20130604 Re: CVE Request: kernel info leak in tkill/tgkill  View
195546 38240 CVE-2013-2141 USN-1899-1  View
195547 38240 CVE-2013-2141 USN-1900-1  View
195548 38240 CVE-2013-2141 https://bugzilla.redhat.com/show_bug.cgi?id=970873  View
195549 38240 CVE-2013-2141 https://github.com/torvalds/linux/commit/b9e146d8eb3b9ecae5086d373b50fa0c1f3e7f0f  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
21344 JVNDB-2013-002919 Linux Kernel の kernel/signal.c における重要な情報を取得される脆弱性 Linux Kernel の kernel/signal.c 内の do_tkill 関数は、特定のデータ構造を初期化しないため、カーネルメモリから重要な情報を取得される脆弱性が存在します。 CVE-2013-2141 62083 CVE-2013-2141 38240 2.1 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-002919.html 2013-04-25 2013-11-20 View