Linux Kernel 3.9 net/l2tp/l2tp_ip6.c l2tp_ip6_recvmsg information disclosure
CVSS Meta Temp Score | Current Exploit Price (≈) | CTI Interest Score |
---|---|---|
5.9 | $0-$5k | 0.00 |
A vulnerability was found in Linux Kernel 3.9 (Operating System). It has been rated as problematic. This issue affects the function l2tp_ip6_recvmsg
of the file net/l2tp/l2tp_ip6.c. The manipulation with an unknown input leads to a information disclosure vulnerability. Using CWE to declare the problem leads to CWE-200. The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information. Impacted is confidentiality. The summary by CVE is:
The l2tp_ip6_recvmsg function in net/l2tp/l2tp_ip6.c in the Linux kernel before 3.9-rc7 does not initialize a certain structure member, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call.
The weakness was published 04/07/2013 by Mathias Krause as not defined mailinglist post (Maillist). It is possible to read the advisory at lkml.org. The identification of this vulnerability is CVE-2013-3230 since 04/21/2013. The exploitation is known to be easy. Attacking locally is a requirement. No form of authentication is needed for a successful exploitation. Technical details of the vulnerability are known, but there is no available exploit. The attack technique deployed by this issue is T1592 according to MITRE ATT&CK.
The vulnerability scanner Nessus provides a plugin with the ID 66248 (Fedora 18 : kernel-3.8.8-203.fc18 (2013-6537)), which helps to determine the existence of the flaw in a target environment. It is assigned to the family Fedora Local Security Checks.
Upgrading to version 3.9-rc7 eliminates this vulnerability. Applying a patch is able to eliminate this problem. The bugfix is ready for download at git.kernel.org. The best possible mitigation is suggested to be upgrading to the latest version. A possible mitigation has been published immediately after the disclosure of the vulnerability.
The vulnerability is also documented in the databases at X-Force (83692) and Tenable (66248). Similar entries are available at 8485, 8484, 8486 and 8487.
Product
Type
Vendor
Name
Version
License
CPE 2.3
CPE 2.2
CVSSv4
VulDB CVSS-B Score: 🔍VulDB CVSS-BT Score: 🔍
VulDB Vector: 🔍
VulDB Reliability: 🔍
CVSSv3
VulDB Meta Base Score: 6.2VulDB Meta Temp Score: 5.9
VulDB Base Score: 6.2
VulDB Temp Score: 5.9
VulDB Vector: 🔍
VulDB Reliability: 🔍
CVSSv2
AV | AC | Au | C | I | A |
---|---|---|---|---|---|
💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
Vector | Complexity | Authentication | Confidentiality | Integrity | Availability |
---|---|---|---|---|---|
unlock | unlock | unlock | unlock | unlock | unlock |
unlock | unlock | unlock | unlock | unlock | unlock |
unlock | unlock | unlock | unlock | unlock | unlock |
VulDB Base Score: 🔍
VulDB Temp Score: 🔍
VulDB Reliability: 🔍
NVD Base Score: 🔍
Exploiting
Class: Information disclosureCWE: CWE-200 / CWE-284 / CWE-266
ATT&CK: T1592
Local: Yes
Remote: No
Availability: 🔍
Status: Not defined
EPSS Score: 🔍
EPSS Percentile: 🔍
Price Prediction: 🔍
Current Price Estimation: 🔍
0-Day | unlock | unlock | unlock | unlock |
---|---|---|---|---|
Today | unlock | unlock | unlock | unlock |
Nessus ID: 66248
Nessus Name: Fedora 18 : kernel-3.8.8-203.fc18 (2013-6537)
Nessus File: 🔍
Nessus Risk: 🔍
Nessus Family: 🔍
OpenVAS ID: 865961
OpenVAS Name: Fedora Update for kernel FEDORA-2013-10695
OpenVAS File: 🔍
OpenVAS Family: 🔍
Threat Intelligence
Interest: 🔍Active Actors: 🔍
Active APT Groups: 🔍
Countermeasures
Recommended: UpgradeStatus: 🔍
Reaction Time: 🔍
0-Day Time: 🔍
Exposure Time: 🔍
Upgrade: Kernel 3.9-rc7
Patch: git.kernel.org
Timeline
04/07/2013 🔍04/07/2013 🔍
04/07/2013 🔍
04/14/2013 🔍
04/21/2013 🔍
04/22/2013 🔍
04/24/2013 🔍
05/27/2013 🔍
05/31/2013 🔍
05/10/2021 🔍
Sources
Vendor: kernel.orgAdvisory: lkml.org
Researcher: Mathias Krause
Status: Not defined
Confirmation: 🔍
CVE: CVE-2013-3230 (🔍)
OVAL: 🔍
X-Force: 83692
Vulnerability Center: 39724 - Linux Kernel Before 3.9-rc7 \x27l2tp_ip6_recvmsg\x27 Function Allows Local Information Disclosure Vulnerability, Low
SecurityFocus: 59387 - Linux Kernel CVE-2013-3230 Local Information Disclosure Vulnerability
Secunia: 53647 - Ubuntu update for kernel, Moderately Critical
OSVDB: 92665
See also: 🔍
Entry
Created: 04/24/2013 11:45Updated: 05/10/2021 08:47
Changes: 04/24/2013 11:45 (78), 04/30/2017 12:49 (5), 05/10/2021 08:47 (3)
Complete: 🔍
Committer: olku
No comments yet. Languages: en.
Please log in to comment.