CVE-2013-7266 in Linux Kernel
Summary
The mISDN_sock_recvmsg function in drivers/isdn/mISDN/socket.c in the Linux kernel before 3.12.4 does not ensure that a certain length value is consistent with the size of an associated data structure, which allows local users to obtain sensitive information from kernel memory via a (1) recvfrom, (2) recvmmsg, or (3) recvmsg system call.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Reservation
01/05/2014
Disclosure
01/06/2014
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 11757 | Linux Kernel socket.c mISDN_sock_recvmsg input validation | 20 | Not defined | Official fix | CVE-2013-7266 |