Published: 07/06/2013 Updated: 13/02/2023

CVSS v2 Base Score: 2.1 | Impact Score: 2.9 | Exploitability Score: 3.9

VMScore: 188

Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N

The fill_event_metadata function in fs/notify/fanotify/fanotify_user.c in the Linux kernel up to and including 3.9.4 does not initialize a certain structure member, which allows local users to obtain sensitive information from kernel memory via a read operation on the fanotify descriptor.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel 3.9.0
linux linux kernel 3.9.2
linux linux kernel 3.9
linux linux kernel 3.9.3
linux linux kernel
linux linux kernel 3.9.1

Synopsis Important: kernel-rt security and bug fix update Type/Severity Security Advisory: Important Topic Updated kernel-rt packages that fix several security issues and multiplebugs are now available for Red Hat Enterprise MRG 23The Red Hat Security Response Team has rated this update as havingimportant ...

Several vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service, information leak or privilege escalation The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2013-1059 Chanam Park reported an issue in the Ceph distributed storage system Remote users can cause a den ...

Several security issues were fixed in the kernel ...

The system could be made to expose sensitive information ...

Several security issues were fixed in the kernel ...

CWE-399 http://lkml.org/lkml/2013/6/3/128 http://www.openwall.com/lists/oss-security/2013/06/05/26 https://bugzilla.redhat.com/show_bug.cgi?id=971258 http://www.ubuntu.com/usn/USN-1930-1 http://www.ubuntu.com/usn/USN-1929-1 http://lists.opensuse.org/opensuse-security-announce/2013-09/msg00003.html http://lists.opensuse.org/opensuse-security-announce/2013-09/msg00004.html http://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html https://access.redhat.com/errata/RHSA-2013:1264 https://nvd.nist.gov https://usn.ubuntu.com/1936-1/https://www.debian.org/security/./dsa-2745

CVE-2013-2148

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect