NVD

Id
40112  
Name
CVE-2013-4515  
Description
The bcm_char_ioctl function in drivers/staging/bcm/Bcmchar.c in the Linux kernel before 3.12 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel memory via an IOCTL_BCM_GET_DEVICE_DRIVER_INFO ioctl call.  
Reject
 
CVSS Version
2  
CVSS Score
4.9  
Severity
Medium  
CVSS Base Score
4.9  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:N/A:N)  
Pub Date
2017-01-18  
Published
2013-11-12  
Modified Date
2014-03-05  
Seq
2013-4515  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
204120 40112 CVE-2013-4515 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=8d1e72250c847fa96498ec029891de4dc638a5ba  View
204121 40112 CVE-2013-4515 openSUSE-SU-2014:0204  View
204122 40112 CVE-2013-4515 openSUSE-SU-2014:0247  View
204123 40112 CVE-2013-4515 [oss-security] 20131104 Re: some unstracked linux kernel security fixes  View
204124 40112 CVE-2013-4515 USN-2066-1  View
204125 40112 CVE-2013-4515 USN-2067-1  View
204126 40112 CVE-2013-4515 USN-2068-1  View
204127 40112 CVE-2013-4515 USN-2069-1  View
204128 40112 CVE-2013-4515 USN-2070-1  View
204129 40112 CVE-2013-4515 USN-2071-1  View
204130 40112 CVE-2013-4515 USN-2072-1  View
204131 40112 CVE-2013-4515 USN-2073-1  View
204132 40112 CVE-2013-4515 USN-2074-1  View
204133 40112 CVE-2013-4515 USN-2075-1  View
204134 40112 CVE-2013-4515 USN-2076-1  View
204135 40112 CVE-2013-4515 https://github.com/torvalds/linux/commit/8d1e72250c847fa96498ec029891de4dc638a5ba  View
204136 40112 CVE-2013-4515 https://www.kernel.org/pub/linux/kernel/v3.x/patch-3.12.bz2  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
23494 JVNDB-2013-005069 Linux Kernel の drivers/staging/bcm/Bcmchar.c の bcm_char_ioctl 関数における重要な情報を取得される脆弱性 Linux Kernel の drivers/staging/bcm/Bcmchar.c の bcm_char_ioctl 関数は、特定のデータ構造を初期化しないため、カーネルメモリから重要な情報を取得される脆弱性が存在します。 CVE-2013-4515 64457 CVE-2013-4515 40112 4.9 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005069.html 2013-10-30 2013-11-13 View