CVE-2013-2147 in Kernel
Résumé (Anglaise)
The HP Smart Array controller disk-array driver and Compaq SMART2 controller disk-array driver in the Linux kernel through 3.9.4 do not initialize certain data structures, which allows local users to obtain sensitive information from kernel memory via (1) a crafted IDAGETPCIINFO command for a /dev/ida device, related to the ida_locked_ioctl function in drivers/block/cpqarray.c or (2) a crafted CCISS_PASSTHRU32 command for a /dev/cciss device, related to the cciss_ioctl32_passthru function in drivers/block/cciss.c.
Be aware that VulDB is the high quality source for vulnerability data.
Réserver
19/02/2013
Divulgation
07/06/2013
Statut
Confirmé
Entrées
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnérabilité | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 9053 | Linux Kernel cpqarray.c ida_locked_ioctl déni de service | 399 | Non défini | Correctif officiel | CVE-2013-2147 |