NVD

Id
42000  
Name
CVE-2013-7266  
Description
The mISDN_sock_recvmsg function in drivers/isdn/mISDN/socket.c in the Linux kernel before 3.12.4 does not ensure that a certain length value is consistent with the size of an associated data structure, which allows local users to obtain sensitive information from kernel memory via a (1) recvfrom, (2) recvmmsg, or (3) recvmsg system call.  
Reject
 
CVSS Version
2  
CVSS Score
4.9  
Severity
Medium  
CVSS Base Score
4.9  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:N/A:N)  
Pub Date
2017-01-18  
Published
2014-01-06  
Modified Date
2014-03-16  
Seq
2013-7266  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
211996 42000 CVE-2013-7266 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=f3d3342602f8bcbf37d7c46641cb9bca7618eb1c  View
211997 42000 CVE-2013-7266 http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.12.4  View
211998 42000 CVE-2013-7266 [oss-security] 20131231 Re: CVE request: Linux kernel: net: memory leak in recvmsg handlermsg_name & msg_namelen logic  View
211999 42000 CVE-2013-7266 USN-2109-1  View
212000 42000 CVE-2013-7266 USN-2110-1  View
212001 42000 CVE-2013-7266 USN-2113-1  View
212002 42000 CVE-2013-7266 USN-2117-1  View
212003 42000 CVE-2013-7266 USN-2128-1  View
212004 42000 CVE-2013-7266 USN-2129-1  View
212005 42000 CVE-2013-7266 USN-2135-1  View
212006 42000 CVE-2013-7266 USN-2136-1  View
212007 42000 CVE-2013-7266 USN-2138-1  View
212008 42000 CVE-2013-7266 USN-2139-1  View
212009 42000 CVE-2013-7266 USN-2141-1  View
212010 42000 CVE-2013-7266 https://bugzilla.redhat.com/show_bug.cgi?id=1039845  View
212011 42000 CVE-2013-7266 https://github.com/torvalds/linux/commit/f3d3342602f8bcbf37d7c46641cb9bca7618eb1c  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
24219 JVNDB-2013-005794 Linux Kernel の drivers/isdn/mISDN/socket.c の mISDN_sock_recvmsg 関数における重要な情報を取得される脆弱性 Linux Kernel の drivers/isdn/mISDN/socket.c の mISDN_sock_recvmsg 関数は、特定のlength 値が関連付けられたデータ構造のサイズと一致していることを確認しないため、カーネルメモリから重要な情報を取得される脆弱性が存在します。 CVE-2013-7266 67208 CVE-2013-7266 42000 4.9 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005794.html 2013-12-08 2015-08-11 View