Summaryinfo

A vulnerability categorized as problematic has been discovered in Linux Kernel up to 3.5.x. Affected by this issue is the function getsockopt of the file net/dccp/ccids/ccid3.c of the component dccp Subsystem. The manipulation of the argument DCCP_SOCKOPT_CCID_TX_INFO results in information disclosure. This vulnerability is reported as CVE-2012-6138. No exploit exists. It is advisable to implement a patch to correct this issue.

Detailsinfo

A vulnerability, which was classified as problematic, was found in Linux Kernel up to 3.5.x (Operating System). Affected is the function getsockopt of the file net/dccp/ccids/ccid3.c of the component dccp Subsystem. The manipulation of the argument DCCP_SOCKOPT_CCID_TX_INFO with an unknown input leads to a information disclosure vulnerability. CWE is classifying the issue as CWE-200. The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information. This is going to have an impact on confidentiality. CVE summarizes:

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2012-6536, CVE-2012-6537, CVE-2012-6538, CVE-2012-6539, CVE-2012-6540, CVE-2012-6541, CVE-2012-6542, CVE-2012-6543, CVE-2012-6544, CVE-2012-6545, CVE-2012-6546, CVE-2012-6547, CVE-2012-6548, CVE-2012-6549. Reason: This candidate is a duplicate of CVE-2012-6536, CVE-2012-6537, CVE-2012-6538, CVE-2012-6539, CVE-2012-6540, CVE-2012-6541, CVE-2012-6542, CVE-2012-6543, CVE-2012-6544, CVE-2012-6545, CVE-2012-6546, CVE-2012-6547, CVE-2012-6548, and CVE-2012-6549. Notes: All CVE users should reference one or more of CVE-2012-6536, CVE-2012-6537, CVE-2012-6538, CVE-2012-6539, CVE-2012-6540, CVE-2012-6541, CVE-2012-6542, CVE-2012-6543, CVE-2012-6544, CVE-2012-6545, CVE-2012-6546, CVE-2012-6547, CVE-2012-6548, and CVE-2012-6549 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.

The weakness was disclosed 03/05/2013 by Mathias Krause as CVE Requests (maybe): Linux kernel: various info leaks, some NULL ptr derefs as not defined mailinglist post (oss-sec). The advisory is shared for download at seclists.org. The public release happened without coordination with the vendor. This vulnerability is traded as CVE-2012-6138 since 12/06/2012. The exploitability is told to be easy. The attack needs to be approached locally. The successful exploitation needs a authentication. There are known technical details, but no exploit is available. The MITRE ATT&CK project declares the attack technique as T1592.

Applying a patch is able to eliminate this problem. The bugfix is ready for download at github.com. A possible mitigation has been published before and not just after the disclosure of the vulnerability.

The vulnerability is also documented in the vulnerability database at OSVDB (90969†). Further details are available at seclists.org. The entries VDB-7907, VDB-7908, VDB-7909 and VDB-7910 are pretty similar. VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Type

• Operating System

Vendor

• Linux

Name

• Kernel

Version

• 3.0
• 3.1
• 3.2
• 3.3
• 3.4
• 3.5

License

• open-source

Website

• Vendor: https://www.kernel.org/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion