Summaryinfo

A vulnerability was found in Linux Kernel 3.9. It has been classified as problematic. This affects the function vmci_transport_dgram_dequeue of the file net/vmw_vsock/vmci_transport.c of the component Linux Kernel. The manipulation of the argument length leads to information disclosure. This vulnerability is traded as CVE-2013-3236. There is no exploit available. Upgrading the affected component is recommended.

Detailsinfo

A vulnerability, which was classified as problematic, has been found in Linux Kernel 3.9 (Operating System). This issue affects the function vmci_transport_dgram_dequeue of the file net/vmw_vsock/vmci_transport.c of the component Linux Kernel. The manipulation of the argument length with an unknown input leads to a information disclosure vulnerability. Using CWE to declare the problem leads to CWE-200. The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information. Impacted is confidentiality. The summary by CVE is:

The vmci_transport_dgram_dequeue function in net/vmw_vsock/vmci_transport.c in the Linux kernel before 3.9-rc7 does not properly initialize a certain length variable, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call.

The weakness was shared 04/07/2013 as not defined mailinglist post (Maillist). The advisory is shared at lkml.org. The identification of this vulnerability is CVE-2013-3236 since 04/21/2013. The exploitation is known to be easy. An attack has to be approached locally. No form of authentication is needed for a successful exploitation. Technical details are known, but no exploit is available. MITRE ATT&CK project uses the attack technique T1592 for this issue.

Upgrading to version 3.9-rc7 eliminates this vulnerability. Applying a patch is able to eliminate this problem. The bugfix is ready for download at git.kernel.org. The best possible mitigation is suggested to be upgrading to the latest version. A possible mitigation has been published immediately after the disclosure of the vulnerability.

The vulnerability is also documented in the vulnerability database at OSVDB (92659†). The entries VDB-8485, VDB-8484, VDB-8486 and VDB-8487 are related to this item. If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Type

• Operating System

Vendor

• Linux

Name

• Kernel

Version

• 3.9

License

• open-source

Website

• Vendor: https://www.kernel.org/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion