CVE-2013-3232: Infoleak
Last updated 24 July 2024
Other sources
The nrrecvmsg function in net/netrom/afnetrom.c in the Linux kernel before 3.9-rc7 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2013-3232?
CVE-2013-3232 is classified as a medium severity vulnerability allowing local users to potentially access sensitive data.
How do I fix CVE-2013-3232?
To fix CVE-2013-3232, upgrade the Linux kernel to version 3.9-rc7 or later.
Who is affected by CVE-2013-3232?
Users of the Linux kernel versions prior to 3.9-rc7, especially those working with netrom functionality, are affected by CVE-2013-3232.
What type of issue is CVE-2013-3232?
CVE-2013-3232 is an information disclosure vulnerability due to improper initialization of a data structure.
Can CVE-2013-3232 be exploited remotely?
No, CVE-2013-3232 can only be exploited by local users with access to the system.