NVD

Id
38563  
Name
CVE-2013-2547  
Description
The crypto_report_one function in crypto/crypto_user.c in the report API in the crypto user configuration API in the Linux kernel through 3.8.2 does not initialize certain structure members, which allows local users to obtain sensitive information from kernel heap memory by leveraging the CAP_NET_ADMIN capability.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-18  
Published
2013-03-15  
Modified Date
2014-01-03  
Seq
2013-2547  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
197815 38563 CVE-2013-2547 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=9a5467bf7b6e9e02ec9c3da4e23747c05faeaac6  View
197816 38563 CVE-2013-2547 openSUSE-SU-2013:1971  View
197817 38563 CVE-2013-2547 MDVSA-2013:176  View
197818 38563 CVE-2013-2547 [oss-security] 20130305 CVE Requests (maybe): Linux kernel: various info leaks, some NULL ptr derefs  View
197819 38563 CVE-2013-2547 USN-1793-1  View
197820 38563 CVE-2013-2547 USN-1794-1  View
197821 38563 CVE-2013-2547 USN-1795-1  View
197822 38563 CVE-2013-2547 USN-1796-1  View
197823 38563 CVE-2013-2547 USN-1797-1  View
197824 38563 CVE-2013-2547 https://github.com/torvalds/linux/commit/9a5467bf7b6e9e02ec9c3da4e23747c05faeaac6  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
20319 JVNDB-2013-001894 Linux Kernel の暗号ユーザ設定 API における重要な情報を取得される脆弱性 Linux Kernel の暗号ユーザ設定 API (crypto user configuration API) のレポート API の crypto/crypto_user.c 内 crypto_report_one 関数は、特定の構造体メンバを初期化しないため、カーネルヒープメモリから重要な情報を取得される脆弱性が存在します。 CVE-2013-2547 62489 CVE-2013-2547 38563 2.1 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001894.html 2013-03-15 2013-05-21 View