CVE-2013-3224 in Linux Kernel

摘要 (英语)

The bt_sock_recvmsg function in net/bluetooth/af_bluetooth.c in the Linux kernel before 3.9-rc7 does not properly initialize a certain length variable, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call.

预定

2013-04-21

披露

2013-04-22

条目

VulDB provides additional information and datapoints for this CVE:

标识符	漏洞	CWE	可利用	对策	CVE
8485	Linux Kernel Bluetooth af_bluetooth.c bt_sock_recvmsg 信息公开	200	未定义	官方修复	CVE-2013-3224