Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-3211 State: PUBLISHED Published: 2013-04-19T10:00:00Z Last Updated: 2024-09-16T21:56:26.806Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Opera before 12.15 has unknown impact and attack vectors, related to a "moderately severe issue." Additional Analyst Notes: - CVE Program Container: References: - http://www.opera.com/docs/changelogs/unified/1215/
CVE ID: CVE-2013-3212 State: PUBLISHED Published: 2020-01-28T20:23:20 Last Updated: 2024-08-06T16:00:10.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: vtiger CRM 5.4.0 and earlier contain local file-include vulnerabilities in 'customerportal.php' which allows remote attackers to view files and execute local script code. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/27279 - http://www.securityfocus.com/bid/61560 - https://exchange.xforce.ibmcloud.com/vulnerabilities/86162
CVE ID: CVE-2013-3213 State: PUBLISHED Published: 2014-04-02T14:00:00 Last Updated: 2024-08-06T16:00:10.095Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in vTiger CRM 5.0.0 through 5.4.0 allow remote attackers to execute arbitrary SQL commands via the (1) picklist_name parameter in the get_picklists method to soap/customerportal.php, (2) where parameter in the get_tickets_list method to soap/customerportal.php, or (3) emailaddress parameter in the SearchContactsByEmail method to soap/vtigerolservice.php; or remote authenticated users to execute arbitrary SQL commands via the (4) emailaddress parameter in the SearchContactsByEmail method t
ticated users to execute arbitrary SQL commands via the (4) emailaddress parameter in the SearchContactsByEmail method to soap/thunderbirdplugin.php. Additional Analyst Notes: - CVE Program Container: References: - http://karmainsecurity.com/KIS-2013-06 - http://archives.neohapsis.com/archives/bugtraq/2013-08/0001.html - https://www.vtiger.com/blogs/?p=1467 - http://www.securityfocus.com/bid/61563 - https://exchange.xforce.ibmcloud.com/vulnerabilities/86129
CVE ID: CVE-2013-3214 State: PUBLISHED Published: 2020-01-28T20:27:32 Last Updated: 2024-08-06T16:00:10.106Z Vendors: n/a Products: n/a Problem Types: n/a Description: vtiger CRM 5.4.0 and earlier contain a PHP Code Injection Vulnerability in 'vtigerolservice.php'. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/30787 - http://www.securityfocus.com/bid/61558 - https://exchange.xforce.ibmcloud.com/vulnerabilities/86164
CVE ID: CVE-2013-3215 State: PUBLISHED Published: 2020-01-29T17:21:01 Last Updated: 2024-08-06T16:00:10.161Z Vendors: n/a Products: n/a Problem Types: n/a Description: vtiger CRM 5.4.0 and earlier contain an Authentication Bypass Vulnerability due to improper authentication validation in the validateSession function. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/61559 - https://exchange.xforce.ibmcloud.com/vulnerabilities/86163
CVE ID: CVE-2013-3219 State: PUBLISHED Published: 2013-08-01T16:00:00Z Last Updated: 2024-09-16T23:10:47.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: bitcoind and Bitcoin-Qt 0.8.x before 0.8.1 do not enforce a certain block protocol rule, which allows remote attackers to bypass intended access restrictions and conduct double-spending attacks via a large block that triggers incorrect Berkeley DB locking in older product versions. Additional Analyst Notes: - CVE Program Container: References: - https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures - https://en.bitcoin.it/wiki/BIP_0050
CVE ID: CVE-2013-3220 State: PUBLISHED Published: 2013-08-01T16:00:00Z Last Updated: 2024-09-16T22:24:42.272Z Vendors: n/a Products: n/a Problem Types: n/a Description: bitcoind and Bitcoin-Qt before 0.4.9rc2, 0.5.x before 0.5.8rc2, 0.6.x before 0.6.5rc2, and 0.7.x before 0.7.3rc2, and wxBitcoin, do not properly consider whether a block's size could require an excessive number of database locks, which allows remote attackers to cause a denial of service (split) and enable certain double-spending capabilities via a large block that triggers incorrect Berkeley DB locking. Additional Analyst Notes: - CVE Program Container: References: - https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Expo
itional Analyst Notes: - CVE Program Container: References: - https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures - https://en.bitcoin.it/wiki/BIP_0050
CVE ID: CVE-2013-3221 State: PUBLISHED Published: 2013-04-22T01:00:00 Last Updated: 2024-08-06T16:00:10.162Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Active Record component in Ruby on Rails 2.3.x, 3.0.x, 3.1.x, and 3.2.x does not ensure that the declared data type of a database column is used during comparisons of input values to stored values in that column, which makes it easier for remote attackers to conduct data-type injection attacks against Ruby on Rails applications via a crafted value, as demonstrated by unintended interaction between the "typed XML" feature and a MySQL database. Additional Analyst Notes: - CVE Program Container: References: - http://pl.reddit
ped XML" feature and a MySQL database. Additional Analyst Notes: - CVE Program Container: References: - http://pl.reddit.com/r/netsec/comments/17yajp/mysql_madness_and_rails/ - https://groups.google.com/group/rubyonrails-security/msg/1f3bc0b88a60c1ce?dmode=source&output=gplain - http://www.phenoelit.org/blog/archives/2013/02/index.html - http://openwall.com/lists/oss-security/2013/04/24/7 - https://gist.github.com/dakull/5442275 - http://openwall.com/lists/oss-security/2013/02/06/7
CVE ID: CVE-2013-3222 State: PUBLISHED Published: 2013-04-22T10:00:00 Last Updated: 2024-08-06T16:00:10.127Z Vendors: n/a Products: n/a Problem Types: n/a Description: The vcc_recvmsg function in net/atm/common.c in the Linux kernel before 3.9-rc7 does not initialize a certain length variable, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00018.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-April/103750.html - https://github.com/torvalds/linux/commit/9b3e617f3d
edoraproject.org/pipermail/package-announce/2013-April/103750.html - https://github.com/torvalds/linux/commit/9b3e617f3df53822345a8573b6d358f6b9e5ed87 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:176 - http://rhn.redhat.com/errata/RHSA-2013-1051.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/104480.html - http://www.ubuntu.com/usn/USN-1837-1 - https://lkml.org/lkml/2013/4/14/107 - http://www.openwall.com/lists/oss-security/2013/04/14/3 - http://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=9b3e617f3df53822345a8573b6d358f6b9e5ed87 - http://lists.opensuse.or
nux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=9b3e617f3df53822345a8573b6d358f6b9e5ed87 - http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00016.html
CVE ID: CVE-2013-3223 State: PUBLISHED Published: 2013-04-22T10:00:00 Last Updated: 2024-08-06T16:00:10.108Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ax25_recvmsg function in net/ax25/af_ax25.c in the Linux kernel before 3.9-rc7 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00018.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-April/103750.html - http://www.mandriva.com/security/advisories?name=
.fedoraproject.org/pipermail/package-announce/2013-April/103750.html - http://www.mandriva.com/security/advisories?name=MDVSA-2013:176 - https://github.com/torvalds/linux/commit/ef3313e84acbf349caecae942ab3ab731471f1a1 - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/104480.html - http://www.ubuntu.com/usn/USN-1837-1 - https://lkml.org/lkml/2013/4/14/107 - http://www.openwall.com/lists/oss-security/2013/04/14/3 - http://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ef3313e84acbf349caecae942ab3ab731471f1a1 - http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00016.htm
3Bh=ef3313e84acbf349caecae942ab3ab731471f1a1 - http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00016.html
CVE ID: CVE-2013-3224 State: PUBLISHED Published: 2013-04-22T10:00:00 Last Updated: 2024-08-06T16:00:10.029Z Vendors: n/a Products: n/a Problem Types: n/a Description: The bt_sock_recvmsg function in net/bluetooth/af_bluetooth.c in the Linux kernel before 3.9-rc7 does not properly initialize a certain length variable, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00018.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-April/103750.html - http://www.mandriva.com/se
018.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-April/103750.html - http://www.mandriva.com/security/advisories?name=MDVSA-2013:176 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=4683f42fde3977bdb4e8a09622788cc8b5313778 - http://rhn.redhat.com/errata/RHSA-2013-1051.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/104480.html - http://www.ubuntu.com/usn/USN-1837-1 - https://lkml.org/lkml/2013/4/14/107 - http://www.openwall.com/lists/oss-security/2013/04/14/3 - http://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html - https://github.com/torvalds/linux/commit/4683f42fde3977bdb4e8a09622788cc8b5313778 -
suse-updates/2013-12/msg00129.html - https://github.com/torvalds/linux/commit/4683f42fde3977bdb4e8a09622788cc8b5313778 - http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00016.html
CVE ID: CVE-2013-3225 State: PUBLISHED Published: 2013-04-22T10:00:00 Last Updated: 2024-08-06T16:00:10.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: The rfcomm_sock_recvmsg function in net/bluetooth/rfcomm/sock.c in the Linux kernel before 3.9-rc7 does not initialize a certain length variable, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00018.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-April/103750.html - https://github.com/torvalds/linu
ml - http://lists.fedoraproject.org/pipermail/package-announce/2013-April/103750.html - https://github.com/torvalds/linux/commit/e11e0455c0d7d3d62276a0c55d9dfbc16779d691 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:176 - http://rhn.redhat.com/errata/RHSA-2013-1051.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/104480.html - http://www.ubuntu.com/usn/USN-1837-1 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e11e0455c0d7d3d62276a0c55d9dfbc16779d691 - https://lkml.org/lkml/2013/4/14/107 - http://www.openwall.com/lists/oss-security/2013/04/14/3 - http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00016.ht
.openwall.com/lists/oss-security/2013/04/14/3 - http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00016.html
CVE ID: CVE-2013-3226 State: PUBLISHED Published: 2013-04-22T10:00:00 Last Updated: 2024-08-06T16:00:10.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sco_sock_recvmsg function in net/bluetooth/sco.c in the Linux kernel before 3.9-rc7 does not initialize a certain length variable, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/c8c499175f7d295ef867335bceb9a76a2c3cdc38 - http://www.ubuntu.com/usn/USN-1837-1 - https://lkml.org/lkml/2013/4/14/107 - http://www.openwall.com/lists/oss-security
http://www.ubuntu.com/usn/USN-1837-1 - https://lkml.org/lkml/2013/4/14/107 - http://www.openwall.com/lists/oss-security/2013/04/14/3 - http://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=c8c499175f7d295ef867335bceb9a76a2c3cdc38
CVE ID: CVE-2013-3227 State: PUBLISHED Published: 2013-04-22T10:00:00 Last Updated: 2024-08-06T16:00:10.047Z Vendors: n/a Products: n/a Problem Types: n/a Description: The caif_seqpkt_recvmsg function in net/caif/caif_socket.c in the Linux kernel before 3.9-rc7 does not initialize a certain length variable, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00018.html - http://www.mandriva.com/security/advisories?name=MDVSA-2013:176 - http://www.ubuntu.com/usn/USN-1837-1 - https://lkml.or
http://www.mandriva.com/security/advisories?name=MDVSA-2013:176 - http://www.ubuntu.com/usn/USN-1837-1 - https://lkml.org/lkml/2013/4/14/107 - http://www.openwall.com/lists/oss-security/2013/04/14/3 - http://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=2d6fbfe733f35c6b355c216644e08e149c61b271 - http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00016.html - https://github.com/torvalds/linux/commit/2d6fbfe733f35c6b355c216644e08e149c61b271
CVE ID: CVE-2013-3228 State: PUBLISHED Published: 2013-04-22T10:00:00 Last Updated: 2024-08-06T16:00:10.177Z Vendors: n/a Products: n/a Problem Types: n/a Description: The irda_recvmsg_dgram function in net/irda/af_irda.c in the Linux kernel before 3.9-rc7 does not initialize a certain length variable, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00018.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-April/103750.html - http://www.mandriva.com/security/advisorie
//lists.fedoraproject.org/pipermail/package-announce/2013-April/103750.html - http://www.mandriva.com/security/advisories?name=MDVSA-2013:176 - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/104480.html - http://www.ubuntu.com/usn/USN-1837-1 - https://lkml.org/lkml/2013/4/14/107 - http://www.openwall.com/lists/oss-security/2013/04/14/3 - http://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html - https://github.com/torvalds/linux/commit/5ae94c0d2f0bed41d6718be743985d61b7f5c47d - http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00016.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=5ae94c0d2f0bed41d6718be743985d61
.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=5ae94c0d2f0bed41d6718be743985d61b7f5c47d
CVE ID: CVE-2013-3229 State: PUBLISHED Published: 2013-04-22T10:00:00 Last Updated: 2024-08-06T16:00:10.149Z Vendors: n/a Products: n/a Problem Types: n/a Description: The iucv_sock_recvmsg function in net/iucv/af_iucv.c in the Linux kernel before 3.9-rc7 does not initialize a certain length variable, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call. Additional Analyst Notes: - CVE Program Container: References: - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a5598bd9c087dc0efc250a5221e5d0e6f584ee88 - http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00018.html - htt
98bd9c087dc0efc250a5221e5d0e6f584ee88 - http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00018.html - http://www.mandriva.com/security/advisories?name=MDVSA-2013:176 - http://www.ubuntu.com/usn/USN-1837-1 - https://lkml.org/lkml/2013/4/14/107 - http://www.openwall.com/lists/oss-security/2013/04/14/3 - https://github.com/torvalds/linux/commit/a5598bd9c087dc0efc250a5221e5d0e6f584ee88 - http://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html - http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00016.html
CVE ID: CVE-2013-3230 State: PUBLISHED Published: 2013-04-22T10:00:00 Last Updated: 2024-08-06T16:00:10.016Z Vendors: n/a Products: n/a Problem Types: n/a Description: The l2tp_ip6_recvmsg function in net/l2tp/l2tp_ip6.c in the Linux kernel before 3.9-rc7 does not initialize a certain structure member, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2013-April/103750.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b860d3cc62877fad02863e2a08efff69a19382d
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b860d3cc62877fad02863e2a08efff69a19382d2 - https://github.com/torvalds/linux/commit/b860d3cc62877fad02863e2a08efff69a19382d2 - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/104480.html - http://www.ubuntu.com/usn/USN-1837-1 - https://lkml.org/lkml/2013/4/14/107 - http://www.openwall.com/lists/oss-security/2013/04/14/3 - http://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html
CVE ID: CVE-2013-3231 State: PUBLISHED Published: 2013-04-22T10:00:00 Last Updated: 2024-08-06T16:00:10.178Z Vendors: n/a Products: n/a Problem Types: n/a Description: The llc_ui_recvmsg function in net/llc/af_llc.c in the Linux kernel before 3.9-rc7 does not initialize a certain length variable, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00018.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-April/103750.html - http://git.kernel.org/?p=linux/kernel/git/torval
s.fedoraproject.org/pipermail/package-announce/2013-April/103750.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=c77a4b9cffb6215a15196ec499490d116dfad181 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:176 - http://rhn.redhat.com/errata/RHSA-2013-1645.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/104480.html - http://www.ubuntu.com/usn/USN-1837-1 - https://lkml.org/lkml/2013/4/14/107 - http://www.openwall.com/lists/oss-security/2013/04/14/3 - http://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html - https://github.com/torvalds/linux/commit/c77a4b9cffb6215a15196ec499490d116dfad181 - http://lists.opensuse
sg00129.html - https://github.com/torvalds/linux/commit/c77a4b9cffb6215a15196ec499490d116dfad181 - http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00016.html
CVE ID: CVE-2013-3232 State: PUBLISHED Published: 2013-04-22T10:00:00 Last Updated: 2024-08-06T16:00:10.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: The nr_recvmsg function in net/netrom/af_netrom.c in the Linux kernel before 3.9-rc7 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00018.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=c802d759623acbd6e1ee9fbdabae89159a513913 - http://
.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=c802d759623acbd6e1ee9fbdabae89159a513913 - http://lists.fedoraproject.org/pipermail/package-announce/2013-April/103750.html - http://www.mandriva.com/security/advisories?name=MDVSA-2013:176 - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/104480.html - https://lkml.org/lkml/2013/4/14/107 - http://www.openwall.com/lists/oss-security/2013/04/14/3 - http://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html - https://github.com/torvalds/linux/commit/c802d759623acbd6e1ee9fbdabae89159a513913 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=3ce5efad47b62c57a4f5c542483470
a513913 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=3ce5efad47b62c57a4f5c54248347085a750ce0e - https://github.com/torvalds/linux/commit/3ce5efad47b62c57a4f5c54248347085a750ce0e - http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00016.html
CVE ID: CVE-2013-3233 State: PUBLISHED Published: 2013-04-22T10:00:00 Last Updated: 2024-08-06T16:00:10.063Z Vendors: n/a Products: n/a Problem Types: n/a Description: The llcp_sock_recvmsg function in net/nfc/llcp/sock.c in the Linux kernel before 3.9-rc7 does not initialize a certain length variable and a certain data structure, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2013-April/103750.html - http://www.mandriva.com/security/advisories?name=MDVSA-2013:176 - http://lists.fedoraproje
unce/2013-April/103750.html - http://www.mandriva.com/security/advisories?name=MDVSA-2013:176 - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/104480.html - http://www.ubuntu.com/usn/USN-1837-1 - https://lkml.org/lkml/2013/4/14/107 - http://www.openwall.com/lists/oss-security/2013/04/14/3 - http://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d26d6504f23e803824e8ebd14e52d4fc0a0b09cb - https://github.com/torvalds/linux/commit/d26d6504f23e803824e8ebd14e52d4fc0a0b09cb
CVE ID: CVE-2013-3234 State: PUBLISHED Published: 2013-04-22T10:00:00 Last Updated: 2024-08-06T16:00:10.129Z Vendors: n/a Products: n/a Problem Types: n/a Description: The rose_recvmsg function in net/rose/af_rose.c in the Linux kernel before 3.9-rc7 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00018.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-April/103750.html - http://www.mandriva.com/security/advisories?name=
.fedoraproject.org/pipermail/package-announce/2013-April/103750.html - http://www.mandriva.com/security/advisories?name=MDVSA-2013:176 - https://github.com/torvalds/linux/commit/4a184233f21645cf0b719366210ed445d1024d72 - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/104480.html - http://www.ubuntu.com/usn/USN-1837-1 - https://lkml.org/lkml/2013/4/14/107 - http://www.openwall.com/lists/oss-security/2013/04/14/3 - http://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=4a184233f21645cf0b719366210ed445d1024d72 - http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00016.htm
3Bh=4a184233f21645cf0b719366210ed445d1024d72 - http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00016.html