CVE-2013-2547

The crypto_report_one function in crypto/crypto_user.c in the report API in the crypto user configuration API in the Linux kernel through 3.8.2 does not…

published March 14, 2013

CVSS
—
EPSS
0%
Percentile
33.1
In the wild
Unconfirmed
What it is

The crypto_report_one function in crypto/crypto_user.c in the report API in the crypto user configuration API in the Linux kernel through 3.8.2 does not initialize certain structure members, which allows local users to obtain sensitive information from kernel heap memory by leveraging the CAP_NET_ADMIN capability.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00400 · 33.1th percentile
Published
2013-03-14T20:00Z
EPSS history
Timeline
  • 14 MAR 20:00Z
    The crypto_report_one function in crypto/crypto_user.c in the report API in the crypto user configuration API in the Linux kernel through 3.8.2 does not…
    cvelistv5