| Vulnerability Name: | CVE-2013-2636 (CCN-83142) | ||||||||
| Assigned: | 2013-03-22 | ||||||||
| Published: | 2013-03-22 | ||||||||
| Updated: | 2013-04-05 | ||||||||
| Summary: | net/bridge/br_mdb.c in the Linux kernel before 3.8.4 does not initialize certain structures, which allows local users to obtain sensitive information from kernel memory via a crafted application. | ||||||||
| CVSS v3 Severity: | 4.0 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
| ||||||||
| CVSS v2 Severity: | 1.9 Low (CVSS v2 Vector: AV:L/AC:M/Au:N/C:P/I:N/A:N) 1.4 Low (Temporal CVSS v2 Vector: AV:L/AC:M/Au:N/C:P/I:N/A:N/E:U/RL:OF/RC:C)
1.6 Low (CCN Temporal CVSS v2 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N/E:U/RL:OF/RC:C)
| ||||||||
| Vulnerability Type: | CWE-399 | ||||||||
| Vulnerability Consequences: | Obtain Information | ||||||||
| References: | Source: MITRE Type: CNA CVE-2013-2636 Source: CONFIRM Type: Patch http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=c085c49920b2f900ba716b4ca1c1a55ece9872cc Source: CCN Type: Linux Kernel GIT Repository bridge: fix mdb info leaks Source: CONFIRM Type: UNKNOWN http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.8.4 Source: MLIST Type: UNKNOWN [oss-security] 20130320 Re: Linux kernel: net - three info leaks in rtnl Source: CCN Type: Red Hat Bugzilla Bug 923652 CVE-2013-1873 Kernel: information leaks via netlink interface Source: CONFIRM Type: UNKNOWN https://bugzilla.redhat.com/show_bug.cgi?id=923652 Source: XF Type: UNKNOWN kernel-cve20132636-info-disc(83142) Source: CONFIRM Type: Patch https://github.com/torvalds/linux/commit/c085c49920b2f900ba716b4ca1c1a55ece9872cc Source: CCN Type: WhiteSource Vulnerability Database CVE-2013-2636 | ||||||||
| Vulnerable Configuration: | Configuration 1: Configuration CCN 1:  Denotes that component is vulnerable | ||||||||
| Oval Definitions | |||||||||
| |||||||||
| BACK | |||||||||