CVE-2013-7270: Input Validation

Q: What is the severity of CVE-2013-7270?

CVE-2013-7270 has a medium severity level as it allows local users to obtain sensitive information from kernel memory.

Q: How do I fix CVE-2013-7270?

To fix CVE-2013-7270, update the Linux kernel to version 3.12.4 or later.

Q: Which software versions are affected by CVE-2013-7270?

CVE-2013-7270 affects Linux kernel versions prior to 3.12.4 and specific versions such as 2.6.32-431.11.2.el6.

Q: Who is impacted by CVE-2013-7270?

Local users with access to the affected systems can exploit CVE-2013-7270 to read sensitive kernel memory.

Q: What mitigations are in place for CVE-2013-7270?

Mitigations include applying the latest kernel updates and restricting local user access on affected systems.

Published Nov 21, 2013

Updated

Last updated 24 July 2024

Other sources

The packetrecvmsg function in net/packet/afpacket.c in the Linux kernel before 3.12.4 updates a certain length value before ensuring that an associated data structure has been initialized, which allows local users to obtain sensitive information from kernel memory via a (1) recvfrom, (2) recvmmsg, or (3) recvmsg system call.

Affected Software

286 affected componentsFixes available

redhat/kernel<0:2.6.32-431.11.2.el6

0:2.6.32-431.11.2.el6

Linux Linux kernel<=3.12.3

Linux Linux kernel=3.0-rc1

Linux Linux kernel=3.0-rc2

Linux Linux kernel=3.0-rc3

Linux Linux kernel=3.0-rc4

Linux Linux kernel=3.0-rc5

Linux Linux kernel=3.0-rc6

Linux Linux kernel=3.0-rc7

Linux Linux kernel=3.0.1

Linux Linux kernel=3.0.2

Linux Linux kernel=3.0.3

Linux Linux kernel=3.0.4

Linux Linux kernel=3.0.5

Linux Linux kernel=3.0.6

Linux Linux kernel=3.0.7

Linux Linux kernel=3.0.8

Linux Linux kernel=3.0.9

Linux Linux kernel=3.0.10

Linux Linux kernel=3.0.11

Linux Linux kernel=3.0.12

Linux Linux kernel=3.0.13

Linux Linux kernel=3.0.14

Linux Linux kernel=3.0.15

Linux Linux kernel=3.0.16

Linux Linux kernel=3.0.17

Linux Linux kernel=3.0.18

Linux Linux kernel=3.0.19

Linux Linux kernel=3.0.20

Linux Linux kernel=3.0.21

Linux Linux kernel=3.0.22

Linux Linux kernel=3.0.23

Linux Linux kernel=3.0.24

Linux Linux kernel=3.0.25

Linux Linux kernel=3.0.26

Linux Linux kernel=3.0.27

Linux Linux kernel=3.0.28

Linux Linux kernel=3.0.29

Linux Linux kernel=3.0.30

Linux Linux kernel=3.0.31

Linux Linux kernel=3.0.32

Linux Linux kernel=3.0.33

Linux Linux kernel=3.0.34

Linux Linux kernel=3.0.35

Linux Linux kernel=3.0.36

Linux Linux kernel=3.0.37

Linux Linux kernel=3.0.38

Linux Linux kernel=3.0.39

Linux Linux kernel=3.0.40

Linux Linux kernel=3.0.41

Linux Linux kernel=3.0.42

Linux Linux kernel=3.0.43

Linux Linux kernel=3.0.44

Linux Linux kernel=3.0.45

Linux Linux kernel=3.0.46

Linux Linux kernel=3.0.47

Linux Linux kernel=3.0.48

Linux Linux kernel=3.0.49

Linux Linux kernel=3.0.50

Linux Linux kernel=3.0.51

Linux Linux kernel=3.0.52

Linux Linux kernel=3.0.53

Linux Linux kernel=3.0.54

Linux Linux kernel=3.0.55

Linux Linux kernel=3.0.56

Linux Linux kernel=3.0.57

Linux Linux kernel=3.0.58

Linux Linux kernel=3.0.59

Linux Linux kernel=3.0.60

Linux Linux kernel=3.0.61

Linux Linux kernel=3.0.62

Linux Linux kernel=3.0.63

Linux Linux kernel=3.0.64

Linux Linux kernel=3.0.65

Linux Linux kernel=3.0.66

Linux Linux kernel=3.0.67

Linux Linux kernel=3.0.68

Linux Linux kernel=3.1

Linux Linux kernel=3.1-rc1

Linux Linux kernel=3.1-rc2

Linux Linux kernel=3.1-rc3

Linux Linux kernel=3.1-rc4

Linux Linux kernel=3.1.1

Linux Linux kernel=3.1.2

Linux Linux kernel=3.1.3

Linux Linux kernel=3.1.4

Linux Linux kernel=3.1.5

Linux Linux kernel=3.1.6

Linux Linux kernel=3.1.7

Linux Linux kernel=3.1.8

Linux Linux kernel=3.1.9

Linux Linux kernel=3.1.10

Linux Linux kernel=3.2

Linux Linux kernel=3.2-rc2

Linux Linux kernel=3.2-rc3

Linux Linux kernel=3.2-rc4

Linux Linux kernel=3.2-rc5

Linux Linux kernel=3.2-rc6

Linux Linux kernel=3.2-rc7

Linux Linux kernel=3.2.1

Linux Linux kernel=3.2.2

Linux Linux kernel=3.2.3

Linux Linux kernel=3.2.4

Linux Linux kernel=3.2.5

Linux Linux kernel=3.2.6

Linux Linux kernel=3.2.7

Linux Linux kernel=3.2.8

Linux Linux kernel=3.2.9

Linux Linux kernel=3.2.10

Linux Linux kernel=3.2.11

Linux Linux kernel=3.2.12

Linux Linux kernel=3.2.13

Linux Linux kernel=3.2.14

Linux Linux kernel=3.2.15

Linux Linux kernel=3.2.16

Linux Linux kernel=3.2.17

Linux Linux kernel=3.2.18

Linux Linux kernel=3.2.19

Linux Linux kernel=3.2.20

Linux Linux kernel=3.2.21

Linux Linux kernel=3.2.22

Linux Linux kernel=3.2.23

Linux Linux kernel=3.2.24

Linux Linux kernel=3.2.25

Linux Linux kernel=3.2.26

Linux Linux kernel=3.2.27

Linux Linux kernel=3.2.28

Linux Linux kernel=3.2.29

Linux Linux kernel=3.2.30

Linux Linux kernel=3.3

Linux Linux kernel=3.3-rc1

Linux Linux kernel=3.3-rc2

Linux Linux kernel=3.3-rc3

Linux Linux kernel=3.3-rc4

Linux Linux kernel=3.3-rc5

Linux Linux kernel=3.3-rc6

Linux Linux kernel=3.3-rc7

Linux Linux kernel=3.3.1

Linux Linux kernel=3.3.2

Linux Linux kernel=3.3.3

Linux Linux kernel=3.3.4

Linux Linux kernel=3.3.5

Linux Linux kernel=3.3.6

Linux Linux kernel=3.3.7

Linux Linux kernel=3.3.8

Linux Linux kernel=3.4

Linux Linux kernel=3.4-rc1

Linux Linux kernel=3.4-rc2

Linux Linux kernel=3.4-rc3

Linux Linux kernel=3.4-rc4

Linux Linux kernel=3.4-rc5

Linux Linux kernel=3.4-rc6

Linux Linux kernel=3.4-rc7

Linux Linux kernel=3.4.1

Linux Linux kernel=3.4.2

Linux Linux kernel=3.4.3

Linux Linux kernel=3.4.4

Linux Linux kernel=3.4.5

Linux Linux kernel=3.4.6

Linux Linux kernel=3.4.7

Linux Linux kernel=3.4.8

Linux Linux kernel=3.4.9

Linux Linux kernel=3.4.10

Linux Linux kernel=3.4.11

Linux Linux kernel=3.4.12

Linux Linux kernel=3.4.13

Linux Linux kernel=3.4.14

Linux Linux kernel=3.4.15

Linux Linux kernel=3.4.16

Linux Linux kernel=3.4.17

Linux Linux kernel=3.4.18

Linux Linux kernel=3.4.19

Linux Linux kernel=3.4.20

Linux Linux kernel=3.4.21

Linux Linux kernel=3.4.22

Linux Linux kernel=3.4.23

Linux Linux kernel=3.4.24

Linux Linux kernel=3.4.25

Linux Linux kernel=3.4.26

Linux Linux kernel=3.4.27

Linux Linux kernel=3.4.28

Linux Linux kernel=3.4.29

Linux Linux kernel=3.4.30

Linux Linux kernel=3.4.31

Linux Linux kernel=3.4.32

Linux Linux kernel=3.5.1

Linux Linux kernel=3.5.2

Linux Linux kernel=3.5.3

Linux Linux kernel=3.5.4

Linux Linux kernel=3.5.5

Linux Linux kernel=3.5.6

Linux Linux kernel=3.5.7

Linux Linux kernel=3.6

Linux Linux kernel=3.6.1

Linux Linux kernel=3.6.2

Linux Linux kernel=3.6.3

Linux Linux kernel=3.6.4

Linux Linux kernel=3.6.5

Linux Linux kernel=3.6.6

Linux Linux kernel=3.6.7

Linux Linux kernel=3.6.8

Linux Linux kernel=3.6.9

Linux Linux kernel=3.6.10

Linux Linux kernel=3.6.11

Linux Linux kernel=3.7

Linux Linux kernel=3.7.1

Linux Linux kernel=3.7.2

Linux Linux kernel=3.7.3

Linux Linux kernel=3.7.4

Linux Linux kernel=3.7.5

Linux Linux kernel=3.7.6

Linux Linux kernel=3.7.7

Linux Linux kernel=3.7.8

Linux Linux kernel=3.7.9

Linux Linux kernel=3.7.10

Linux Linux kernel=3.8.0

Linux Linux kernel=3.8.1

Linux Linux kernel=3.8.2

Linux Linux kernel=3.8.3

Linux Linux kernel=3.8.4

Linux Linux kernel=3.8.5

Linux Linux kernel=3.8.6

Linux Linux kernel=3.8.7

Linux Linux kernel=3.8.8

Linux Linux kernel=3.8.9

Linux Linux kernel=3.8.10

Linux Linux kernel=3.8.11

Linux Linux kernel=3.8.12

Linux Linux kernel=3.8.13

Linux Linux kernel=3.9-rc1

Linux Linux kernel=3.9-rc2

Linux Linux kernel=3.9-rc3

Linux Linux kernel=3.9-rc4

Linux Linux kernel=3.9-rc5

Linux Linux kernel=3.9-rc6

Linux Linux kernel=3.9-rc7

Linux Linux kernel=3.9.0

Linux Linux kernel=3.9.1

Linux Linux kernel=3.9.2

Linux Linux kernel=3.9.3

Linux Linux kernel=3.9.4

Linux Linux kernel=3.9.5

Linux Linux kernel=3.9.6

Linux Linux kernel=3.9.7

Linux Linux kernel=3.9.8

Linux Linux kernel=3.9.9

Linux Linux kernel=3.9.10

Linux Linux kernel=3.9.11

Linux Linux kernel=3.10.1

Linux Linux kernel=3.10.2

Linux Linux kernel=3.10.3

Linux Linux kernel=3.10.4

Linux Linux kernel=3.10.5

Linux Linux kernel=3.10.6

Linux Linux kernel=3.10.7

Linux Linux kernel=3.10.8

Linux Linux kernel=3.10.9

Linux Linux kernel=3.10.10

Linux Linux kernel=3.10.11

Linux Linux kernel=3.10.12

Linux Linux kernel=3.10.13

Linux Linux kernel=3.10.14

Linux Linux kernel=3.10.15

Linux Linux kernel=3.10.16

Linux Linux kernel=3.10.17

Linux Linux kernel=3.10.18

Linux Linux kernel=3.10.19

Linux Linux kernel=3.10.20

Linux Linux kernel=3.10.21

Linux Linux kernel=3.10.22

Linux Linux kernel=3.10.23

Linux Linux kernel=3.11

Linux Linux kernel=3.11.1

Linux Linux kernel=3.11.2

Linux Linux kernel=3.11.3

Linux Linux kernel=3.11.4

Linux Linux kernel=3.11.5

Linux Linux kernel=3.11.6

Linux Linux kernel=3.11.7

Linux Linux kernel=3.11.8

Linux Linux kernel=3.11.9

Linux Linux kernel=3.11.10

Linux Linux kernel=3.12

Linux Linux kernel=3.12.1

Linux Linux kernel=3.12.2

debian/linux

5.10.223-15.10.234-16.1.129-16.1.135-16.12.22-16.12.25-1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade redhat/kernel to a version that resolves this vulnerability.
Fixed in 0:2.6.32-431.11.2.el6
Upgrade
Upgrade debian/linux to a version that resolves this vulnerability.
Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.22-1Fixed in 6.12.25-1
Upgrade
Upgrade Linux kernel (net/packet/af_packet.c) to a version that resolves this vulnerability.
Fixed in 3.12.4

Event History

Nov 21, 2013

CVE Published

12:00 AM

Jan 6, 2014

CVE Published

via MITRE·11:00 AM

Data Sourced

via MITRE·11:00 AM

Description

Data Sourced

via NVD·04:55 PM

DescriptionSeverityWeaknessAffected Software

Jan 11, 2024

Data Sourced

via Launchpad·10:03 PM

Description

Sep 16, 2024

Data Sourced

via Ubuntu·01:03 AM

RemedyDescriptionSeverityAffected Software

Parent advisories

This vulnerability appears in the following advisories.

RHSA-2014:0328

Frequently Asked Questions

What is the severity of CVE-2013-7270?

CVE-2013-7270 has a medium severity level as it allows local users to obtain sensitive information from kernel memory.

How do I fix CVE-2013-7270?

To fix CVE-2013-7270, update the Linux kernel to version 3.12.4 or later.

Which software versions are affected by CVE-2013-7270?

CVE-2013-7270 affects Linux kernel versions prior to 3.12.4 and specific versions such as 2.6.32-431.11.2.el6.

Who is impacted by CVE-2013-7270?

Local users with access to the affected systems can exploit CVE-2013-7270 to read sensitive kernel memory.

What mitigations are in place for CVE-2013-7270?

Mitigations include applying the latest kernel updates and restricting local user access on affected systems.

CVE-2013-7270: Input Validation

Other sources

Affected Software

Remediation

Event History

Parent advisories

Frequently Asked Questions

What is the severity of CVE-2013-7270?

How do I fix CVE-2013-7270?

Which software versions are affected by CVE-2013-7270?

Who is impacted by CVE-2013-7270?

What mitigations are in place for CVE-2013-7270?

Company

Resources

Contact