CVE-2012-3430 in Kernel
Summary
The rds_recvmsg function in net/rds/recv.c in the Linux kernel before 3.0.44 does not initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via a (1) recvfrom or (2) recvmsg system call on an RDS socket.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Reservation
06/14/2012
Disclosure
10/03/2012
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 6524 | Linux Kernel Reliable Datagram Sockets information disclosure | 200 | Proof-of-Concept | Official fix | CVE-2012-3430 |