CVE-2013-2547 in Kernel
Summary
The crypto_report_one function in crypto/crypto_user.c in the report API in the crypto user configuration API in the Linux kernel through 3.8.2 does not initialize certain structure members, which allows local users to obtain sensitive information from kernel heap memory by leveraging the CAP_NET_ADMIN capability.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Reservation
03/08/2013
Disclosure
03/15/2013
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 63774 | Linux Kernel crypto_report_one cryptographic issue | 310 | Not defined | Official fix | CVE-2013-2547 |