CVE-2013-3225: Infoleak
Last updated 24 July 2024
Other sources
The rfcommsockrecvmsg function in net/bluetooth/rfcomm/sock.c in the ...
— Debian
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.116-1Fixed in 7.2.15-1Fixed in 7.3.3-1 - Upgrade
Upgrade
Linux kernelto a version that resolves this vulnerability.Fixed in 3.9-rc7
Event History
Frequently Asked Questions
What is the severity of CVE-2013-3225?
CVE-2013-3225 has a medium severity rating, as it allows local users to access sensitive information from the kernel stack.
How do I fix CVE-2013-3225?
To fix CVE-2013-3225, upgrade to a version of the Linux kernel that is above 3.9-rc7.
What versions of the Linux kernel are affected by CVE-2013-3225?
CVE-2013-3225 affects Linux kernel versions 3.9 and earlier, including 3.9-rc1 through 3.9-rc6.
Can CVE-2013-3225 be exploited remotely?
CVE-2013-3225 cannot be exploited remotely, as it requires local user access to the system.
What kind of information can be obtained through CVE-2013-3225?
CVE-2013-3225 allows local users to obtain sensitive information from kernel stack memory.