CVE-2013-7270 in Kernel
Summary
The packet_recvmsg function in net/packet/af_packet.c in the Linux kernel before 3.12.4 updates a certain length value before ensuring that an associated data structure has been initialized, which allows local users to obtain sensitive information from kernel memory via a (1) recvfrom, (2) recvmmsg, or (3) recvmsg system call.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Reservation
11/04/2013
Disclosure
01/06/2014
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 11766 | Linux Kernel af_packet.c packet_recvmsg input validation | 20 | Not defined | Official fix | CVE-2013-7270 |