CVE-2012-6546 — Sensitive Information Exposure in Linux

CWE-200 — Sensitive Information Exposure13 documents7 sources
Severity
1.9LOWNVD
EPSS
0.0%
top 95.82%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Linux KernelDebian LinuxRedhat Enterprise Linux
Timeline
PublishedMar 15
Latest updateMay 14

Description

The ATM implementation in the Linux kernel before 3.6 does not initialize certain structures, which allows local users to obtain sensitive information from kernel stack memory via a crafted application.

CVSS vector

AV:L/AC:M/C:P/I:N/A:NExploitability: 3.4 | Impact: 2.9

Affected Packages3 packages

▶Debianlinux/linux_kernel< 3.2.30-1+3
▶NVDlinux/linux_kernel3.5.7+159
▶debiandebian/linux< linux 3.2.30-1 (bookworm)

Also affects: Enterprise Linux 5, 6.0

Patches

Patch: www.kernel.org ↗Patch: www.kernel.org ↗

🔴Vulnerability Details

2
GHSA
GHSA-7g85-cw4w-x8pr: The ATM implementation in the Linux kernel before 3↗2022-05-14
▶
OSV
CVE-2012-6546: The ATM implementation in the Linux kernel before 3↗2013-03-15
▶

📋Vendor Advisories

9
Ubuntu
Linux kernel (EC2) vulnerabilities↗2013-04-25
▶
Ubuntu
Linux kernel vulnerabilities↗2013-04-19
▶
Ubuntu
Linux kernel vulnerabilities↗2012-11-30
▶
Ubuntu
Linux kernel (Oneiric backport) vulnerabilities↗2012-11-30
▶
Ubuntu
Linux kernel (OMAP4) vulnerabilities↗2012-11-30
▶

💬Community

1
Bugzilla
CVE-2012-6546 Kernel: atm: information leak in getsockopt & getsockname↗2013-03-16
▶