Home > Vulnerability Database > CVE-2013-7263

Mend.io Vulnerability Database

CVE-2013-7263

Date: January 6, 2014

The Linux kernel before 3.12.4 updates certain length values before ensuring that associated data structures have been initialized, which allows local users to obtain sensitive information from kernel stack memory via a (1) recvfrom, (2) recvmmsg, or (3) recvmsg system call, related to net/ipv4/ping.c, net/ipv4/raw.c, net/ipv4/udp.c, net/ipv6/raw.c, and net/ipv6/udp.c.

Language: C

Severity Score

6.2

Related Resources (31)

Url: https://people.canonical.com/~ubuntu-security/cve/CVE-2013-7263

Url: http://www.ubuntu.com/usn/USN-2141-1

Url: https://access.redhat.com/security/cve/CVE-2013-7263

Url: http://rhn.redhat.com/errata/RHSA-2014-0285.html

Url: http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00000.html

Url: http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00026.html

Url: https://nvd.nist.gov/vuln/detail/CVE-2013-7263

Url: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=bceaa90240b6019ed73b49965eac7d167610be69

Url: http://www.ubuntu.com/usn/USN-2107-1

Url: http://www.ubuntu.com/usn/USN-2108-1

Url: http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.12.4

Url: http://www.ubuntu.com/usn/USN-2109-1

Url: https://bugzilla.redhat.com/show_bug.cgi?id=1035875

Url: http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html

Url: http://www.ubuntu.com/usn/USN-2110-1

Url: http://secunia.com/advisories/56036

Url: http://secunia.com/advisories/55882

Url: http://www.ubuntu.com/usn/USN-2135-1

Url: http://www.ubuntu.com/usn/USN-2113-1

Url: https://security-tracker.debian.org/tracker/CVE-2013-7263

Url: http://www.ubuntu.com/usn/USN-2136-1

Url: http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html

Url: http://www.ubuntu.com/usn/USN-2117-1

Url: http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html

Url: http://www.openwall.com/lists/oss-security/2013/11/28/13

Url: http://rhn.redhat.com/errata/RHSA-2014-0159.html

Url: http://www.ubuntu.com/usn/USN-2138-1

Url: http://www.ubuntu.com/usn/USN-2139-1

Url: http://seclists.org/oss-sec/2014/q1/29

Url: https://github.com/torvalds/linux/commit/bceaa90240b6019ed73b49965eac7d167610be69

Url: https://www.mend.io/vulnerability-database/CVE-2013-7263

Severity Score

6.2

Weakness Type (CWE)

Improper Input Validation

CWE-20

CVSS v3.1

Base Score:	6.2
Attack Vector (AV):	LOCAL
Attack Complexity (AC):	LOW
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	HIGH
Integrity (I):	NONE
Availability (A):	NONE

CVSS v2

Base Score:	4.9
Access Vector (AV):	LOCAL
Access Complexity (AC):	LOW
Authentication (AU):	NONE
Confidentiality (C):	COMPLETE
Integrity (I):	NONE
Availability (A):	NONE
Additional information:

Mend.io Vulnerability Database

We found results for “”

CVE-2013-7263

Date: January 6, 2014

Language: C

Severity Score

Related Resources (31)

Severity Score

Weakness Type (CWE)

CVSS v3.1

CVSS v2

Do you need more information?