CVSS: 6.2EPSS: 0%CPEs: 192EXPL: 0CVE-2012-6545 – Kernel: Bluetooth: RFCOMM - information leak
https://notcve.org/view.php?id=CVE-2012-6545
14 Mar 2013 — The Bluetooth RFCOMM implementation in the Linux kernel before 3.6 does not properly initialize certain structures, which allows local users to obtain sensitive information from kernel memory via a crafted application. La aplicación Bluetooth RFCOMM en el kernel de Linux anteriores a v3.6 no inicializa correctamente ciertas estructuras, lo que permite a usuarios locales obtener información sensible de la memoria del núcleo a través de una aplicación diseñada. The kernel packages contain the Linux kernel, th... • http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=9344a972961d1a6d2c04d9008b13617bcb6ec2ef • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 5.5EPSS: 0%CPEs: 191EXPL: 0CVE-2012-6548 – Kernel: udf: information leak on export
https://notcve.org/view.php?id=CVE-2012-6548
14 Mar 2013 — The udf_encode_fh function in fs/udf/namei.c in the Linux kernel before 3.6 does not initialize a certain structure member, which allows local users to obtain sensitive information from kernel heap memory via a crafted application. La función udf_encode_fh en fs / udf / namei.c en el kernel de Linux anteriores a v3.6 no se inicializa un miembro de cierta estructura, que permite a usuarios locales obtener información sensible de la memoria del núcleo a través de un montón de aplicaciones diseñado. Red Hat Op... • http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=0143fc5e9f6f5aad4764801015bc8d4b4a278200 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 5.5EPSS: 0%CPEs: 190EXPL: 0CVE-2012-6539
https://notcve.org/view.php?id=CVE-2012-6539
14 Mar 2013 — The dev_ifconf function in net/socket.c in the Linux kernel before 3.6 does not initialize a certain structure, which allows local users to obtain sensitive information from kernel stack memory via a crafted application. La función dev_ifconf en net/socket.c en el kernel de Linux anterior a v3.6 no inicializa correctamente cierta estructura, permitiendo a usuarios locales obtener información sensible de la memoria de pila del núcleo a través de una aplicación especialmente diseñada. • http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=43da5f2e0d0c69ded3d51907d9552310a6b545e8 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 5.5EPSS: 0%CPEs: 190EXPL: 0CVE-2012-6543
https://notcve.org/view.php?id=CVE-2012-6543
14 Mar 2013 — The l2tp_ip6_getname function in net/l2tp/l2tp_ip6.c in the Linux kernel before 3.6 does not initialize a certain structure member, which allows local users to obtain sensitive information from kernel stack memory via a crafted application. La función l2tp_ip6_getname en net/l2tp/l2tp_ip6.c en el kernel de Linux anterior a v3.6 no inicializa correctamente cierta estructura, permitiendo a usuarios locales obtener información sensible de la memoria de pila del núcleo a través de una aplicación especialmente d... • http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=04d4fbca1017c11381e7d82acea21dd741e748bc • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 5.5EPSS: 0%CPEs: 192EXPL: 0CVE-2012-6537 – Kernel: xfrm_user information leaks copy_to_user_
https://notcve.org/view.php?id=CVE-2012-6537
14 Mar 2013 — net/xfrm/xfrm_user.c in the Linux kernel before 3.6 does not initialize certain structures, which allows local users to obtain sensitive information from kernel memory by leveraging the CAP_NET_ADMIN capability. net/XFRM/xfrm_user.c en el kernel de Linux anteriores a v3.6 no se inicializa algunas estructuras, lo que permite a usuarios locales obtener información sensible de la memoria del kernel mediante el aprovechamiento de la capacidad CAP_NET_ADMIN. • http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1f86840f897717f86d523a13e99a447e6a5d2fa5 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 5.5EPSS: 0%CPEs: 176EXPL: 0CVE-2013-1819 – kernel: xfs: _xfs_buf_find oops on blocks beyond the filesystem end
https://notcve.org/view.php?id=CVE-2013-1819
06 Mar 2013 — The _xfs_buf_find function in fs/xfs/xfs_buf.c in the Linux kernel before 3.7.6 does not validate block numbers, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by leveraging the ability to mount an XFS filesystem containing a metadata inode with an invalid extent map. La función _xfs_buf_find en fs/xfs/xfs_buf.c en el kernel de Linux antes de v3.7.6 que no valida bloques de numeros, que permite a usuarios locales de... • http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=eb178619f930fa2ba2348de332a1ff1c66a31424 • CWE-20: Improper Input Validation CWE-476: NULL Pointer Dereference •
CVSS: 8.8EPSS: 0%CPEs: 170EXPL: 0CVE-2013-0228 – kernel: xen: userspace alterable %ds access in xen_iret()
https://notcve.org/view.php?id=CVE-2013-0228
01 Mar 2013 — The xen_iret function in arch/x86/xen/xen-asm_32.S in the Linux kernel before 3.7.9 on 32-bit Xen paravirt_ops platforms does not properly handle an invalid value in the DS segment register, which allows guest OS users to gain guest OS privileges via a crafted application. La función xen_iret en arch/x86/xen/xen-asm_32.S en Linux kernel anterior a 3.7.9 en plataformas 32-bit Xen paravirt_ops no manejan adecuadamente un valor invalido en el segmento del registro DS, lo que permite a usuarios en el sistema op... • http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=13d2b4d11d69a92574a55bfd985cfb0ca77aebdc • CWE-189: Numeric Errors •
CVSS: 7.5EPSS: 2%CPEs: 182EXPL: 0CVE-2013-0343 – kernel: handling of IPv6 temporary addresses
https://notcve.org/view.php?id=CVE-2013-0343
28 Feb 2013 — The ipv6_create_tempaddr function in net/ipv6/addrconf.c in the Linux kernel through 3.8 does not properly handle problems with the generation of IPv6 temporary addresses, which allows remote attackers to cause a denial of service (excessive retries and address-generation outage), and consequently obtain sensitive information, via ICMPv6 Router Advertisement (RA) messages. La función ipv6_create_tempaddr en net/ipv6/addrconf.c en el kernel de Linux hasta la v3.8 no maneja adecuadamente los problemas con la ... • http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00002.html •
CVSS: 5.5EPSS: 0%CPEs: 159EXPL: 0CVE-2013-1772 – kernel: call_console_drivers() function log prefix stripping DoS
https://notcve.org/view.php?id=CVE-2013-1772
28 Feb 2013 — The log_prefix function in kernel/printk.c in the Linux kernel 3.x before 3.4.33 does not properly remove a prefix string from a syslog header, which allows local users to cause a denial of service (buffer overflow and system crash) by leveraging /dev/kmsg write access and triggering a call_console_drivers function call. La función log_prefix en kernel/printk.c en el kernel Linux v3.x anterior a v3.4.33,, no elimina adecuadamente el prefijo de la cabecera de syslog, lo que permite a usuarios locales provoca... • http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00018.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.5EPSS: 0%CPEs: 176EXPL: 0CVE-2013-0349 – kernel: bluetooth HIDP implementation information disclosure
https://notcve.org/view.php?id=CVE-2013-0349
28 Feb 2013 — The hidp_setup_hid function in net/bluetooth/hidp/core.c in the Linux kernel before 3.7.6 does not properly copy a certain name field, which allows local users to obtain sensitive information from kernel memory by setting a long name and making an HIDPCONNADD ioctl call. La función hidp_setup_hid en net/bluetooth/hidp/core.c en el kernel de linux anterior a v3.7.6 no maneja adecuadamente la copia de determinados campos de nombre de archivo, lo que permite a usuarios locales obtener información sensible desd... • http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=0a9ab9bdb3e891762553f667066190c1d22ad62b • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •