QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2013-3236

Back to search

CVE-2013-3236

Published: Apr 22, 2013

Modified: Aug 6, 2024

PUBLISHED

Description

The vmci_transport_dgram_dequeue function in net/vmw_vsock/vmci_transport.c in the Linux kernel before 3.9-rc7 does not properly initialize a certain length variable, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call.

VendorProductVersions

n/a

n/a

affected
n/a

References

[linux-kernel] 20130414 Linux 3.9-rc7
mailing-list
x_refsource_MLIST
linux-cve20133236-info-disc(83698)
vdb-entry
x_refsource_XF
59391
vdb-entry
x_refsource_BID

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now