CVE-2013-2546 — Kernel vulnerability
Severity
2.1LOWNVD
EPSS
0.1%
top 77.91%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMar 15
Latest updateMay 13
Description
The report API in the crypto user configuration API in the Linux kernel through 3.8.2 uses an incorrect C library function for copying strings, which allows local users to obtain sensitive information from kernel stack memory by leveraging the CAP_NET_ADMIN capability.
CVSS vector
AV:L/AC:L/C:P/I:N/A:NExploitability: 3.9 | Impact: 2.9
Affected Packages3 packages
🔴Vulnerability Details
3GHSA▶
GHSA-rvmp-6gcj-rjrw: The report API in the crypto user configuration API in the Linux kernel through 3↗2022-05-13
OSV▶
CVE-2013-2546: The report API in the crypto user configuration API in the Linux kernel through 3↗2013-03-15
CVEList▶
CVE-2013-2546: The report API in the crypto user configuration API in the Linux kernel through 3↗2013-03-14