2.1
CVSSv2

CVE-2012-3430

Published: 03/10/2012 Updated: 13/02/2023
CVSS v2 Base Score: 2.1 | Impact Score: 2.9 | Exploitability Score: 3.9
VMScore: 215
Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Summary

The rds_recvmsg function in net/rds/recv.c in the Linux kernel prior to 3.0.44 does not initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via a (1) recvfrom or (2) recvmsg system call on an RDS socket.

Vulnerable Product Search on Vulmon Subscribe to Product

linux linux kernel 3.0.25

linux linux kernel 3.0.22

linux linux kernel 3.0.5

linux linux kernel 3.0.38

linux linux kernel 3.0.18

linux linux kernel 3.0.6

linux linux kernel 3.0.36

linux linux kernel 3.0.35

linux linux kernel 3.0.11

linux linux kernel 3.0.34

linux linux kernel 3.0.32

linux linux kernel 3.0.19

linux linux kernel 3.0.37

linux linux kernel 3.0.4

linux linux kernel 3.0.27

linux linux kernel 3.0.42

linux linux kernel 3.0.23

linux linux kernel 3.0.8

linux linux kernel 3.0.40

linux linux kernel 3.0.33

linux linux kernel 3.0.28

linux linux kernel 3.0.13

linux linux kernel 3.0.10

linux linux kernel 3.0.1

linux linux kernel 3.0.17

linux linux kernel

linux linux kernel 3.0.16

linux linux kernel 3.0.21

linux linux kernel 3.0.7

linux linux kernel 3.0.20

linux linux kernel 3.0.24

linux linux kernel 3.0.15

linux linux kernel 3.0.39

linux linux kernel 3.0.2

linux linux kernel 3.0.12

linux linux kernel 3.0.3

linux linux kernel 3.0.9

linux linux kernel 3.0.26

linux linux kernel 3.0.30

linux linux kernel 3.0.31

linux linux kernel 3.0.29

linux linux kernel 3.0.14

linux linux kernel 3.0.41

Vendor Advisories

Synopsis Moderate: kernel security and bug fix update Type/Severity Security Advisory: Moderate Topic Updated kernel packages that fix multiple security issues and several bugsare now available for Red Hat Enterprise Linux 6The Red Hat Security Response Team has rated this update as having moderatesecurity ...
Synopsis Important: kernel security and bug fix update Type/Severity Security Advisory: Important Topic Updated kernel packages that fix multiple security issues and several bugsare now available for Red Hat Enterprise Linux 5The Red Hat Security Response Team has rated this update as havingimportant secur ...
Synopsis Important: kernel-rt security and bug fix update Type/Severity Security Advisory: Important Topic Updated kernel-rt packages that fix several security issues and multiplebugs are now available for Red Hat Enterprise MRG 22The Red Hat Security Response Team has rated this update as havingimportant ...
Several security issues were fixed in the kernel ...
Several security issues were fixed in the kernel ...
Several security issues were fixed in the kernel ...
Several security issues were fixed in the kernel ...
Several security issues were fixed in the kernel ...
Several security issues were fixed in the kernel ...
Several security issues were fixed in the kernel ...
Several security issues were fixed in the kernel ...
Several security issues were fixed in the kernel ...
Several security issues were fixed in the kernel ...
The rds_recvmsg function in net/rds/recvc in the Linux kernel before 3044 does not initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via a (1) recvfrom or (2) recvmsg system call on an RDS socket ...
An integer overflow flaw was found in the i915_gem_do_execbuffer() function in the Intel i915 driver in the Linux kernel A local, unprivileged user could use this flaw to cause a denial of service This issue only affected 32-bit systems (CVE-2012-2384, Moderate) A memory leak flaw was found in the way the Linux kernel's memory subsystem handled ...

Exploits

/* source: wwwsecurityfocuscom/bid/54702/info The Linux kernel is prone to a local information-disclosure vulnerability Local attackers can exploit this issue to obtain sensitive information that may lead to further attacks */ /***************** rds_clientc ********************/ int main(void) { int sock_fd; struct sockaddr_in ser ...