CVE-2013-3229: Infoleak
Last updated 24 July 2024
Other sources
The iucvsockrecvmsg function in net/iucv/afiucv.c in the Linux kernel before 3.9-rc7 does not initialize a certain length variable, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2013-3229?
CVE-2013-3229 has a medium severity rating due to the potential for local users to access sensitive information from kernel stack memory.
How do I fix CVE-2013-3229?
To mitigate CVE-2013-3229, it is recommended to upgrade to Linux kernel version 3.9-rc7 or later.
Which versions of the Linux kernel are affected by CVE-2013-3229?
CVE-2013-3229 affects the Linux kernel versions before 3.9-rc7, including 3.9-rc1 through 3.9-rc6.
What type of attack does CVE-2013-3229 facilitate?
CVE-2013-3229 allows for local information disclosure, enabling attackers to read sensitive data from the kernel stack.
Who can exploit CVE-2013-3229?
CVE-2013-3229 can be exploited by local users with the ability to craft specific recvmsg or recvfrom system calls.