Security Advisory

CVE-2013-2548

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2013-03-14 20:00:00

Last updated 2024-08-06 15:44:32

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

The crypto_report_one function in crypto/crypto_user.c in the report API in the crypto user configuration API in the Linux kernel through 3.8.2 uses an incorrect length value during a copy operation, which allows local users to obtain sensitive information from kernel memory by leveraging the CAP_NET_ADMIN capability.

← Browse all CVEs View on cve.org ↗