CVE-2013-3228: Infoleak
Published Apr 22, 2013
·Updated
Last updated 24 July 2024
Other sources
The irdarecvmsgdgram function in net/irda/afirda.c in the Linux ker ...
— Debian
Affected Software
7 affected componentsFixes available
Linux Linux kernel<=3.9
Linux Linux kernel=3.9-rc1
Linux Linux kernel=3.9-rc2
Linux Linux kernel=3.9-rc3
Linux Linux kernel=3.9-rc4
Linux Linux kernel=3.9-rc5
debian/linux
6.1.176-16.1.190-16.12.107-16.12.116-17.2.15-17.3.3-1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.116-1Fixed in 7.2.15-1Fixed in 7.3.3-1 - Upgrade
Upgrade
Linux kernelto a version that resolves this vulnerability.Fixed in 3.9-rc7
Event History
Apr 22, 2013
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-3228?
CVE-2013-3228 is classified as a local information disclosure vulnerability.
2
How do I fix CVE-2013-3228?
To fix CVE-2013-3228, upgrade the Linux kernel to version 3.9-rc8 or later.
3
What versions of the Linux kernel are affected by CVE-2013-3228?
CVE-2013-3228 affects the Linux kernel versions before 3.9-rc7.
4
Can CVE-2013-3228 be exploited remotely?
No, CVE-2013-3228 cannot be exploited remotely as it requires local user access.
5
What type of sensitive information can be compromised by CVE-2013-3228?
CVE-2013-3228 allows local users to access sensitive information from the kernel stack memory.