CVE-2013-3235: Infoleak
Last updated 24 July 2024
Other sources
net/tipc/socket.c in the Linux kernel before 3.9-rc7 does not initiali ...
— Debian
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.116-1Fixed in 7.2.15-1Fixed in 7.3.3-1 - Upgrade
Upgrade
Linux kernelto a version that resolves this vulnerability.Fixed in 3.9-rc7
Event History
Frequently Asked Questions
What is the severity of CVE-2013-3235?
CVE-2013-3235 is considered a medium severity vulnerability as it allows local users to access sensitive information from kernel stack memory.
How do I fix CVE-2013-3235?
To fix CVE-2013-3235, upgrade to the Linux kernel version 3.9 or later.
What versions of Linux are affected by CVE-2013-3235?
CVE-2013-3235 affects Linux kernel versions prior to 3.9-rc7, including all 'rc' versions from 3.9-rc1 to 3.9-rc6.
Who can exploit CVE-2013-3235?
CVE-2013-3235 can be exploited by local users with the ability to execute crafted recvmsg or recvfrom system calls.
What information can be disclosed by CVE-2013-3235?
CVE-2013-3235 can potentially disclose sensitive information stored in kernel stack memory.