Launchpad.net

CVE 2013-2547

The crypto_report_one function in crypto/crypto_user.c in the report API in the crypto user configuration API in the Linux kernel through 3.8.2 does not initialize certain structure members, which allows local users to obtain sensitive information from kernel heap memory by leveraging the CAP_NET_ADMIN capability.

Related bugs and status

CVE-2013-2547 (Candidate) is related to these bugs:

Bug #1156795: CVE-2013-2547

		In	Importance	Status
1156795	CVE-2013-2547	linux (Ubuntu)	Medium	Invalid
1156795	CVE-2013-2547	linux-fsl-imx51 (Ubuntu)	Medium	Invalid
1156795	CVE-2013-2547	linux-mvl-dove (Ubuntu)	Medium	Invalid
1156795	CVE-2013-2547	linux-lts-backport-maverick (Ubuntu)	Medium	Invalid
1156795	CVE-2013-2547	linux-lts-backport-natty (Ubuntu)	Undecided	Invalid
1156795	CVE-2013-2547	linux-ti-omap4 (Ubuntu)	Medium	Invalid
1156795	CVE-2013-2547	linux-ec2 (Ubuntu)	Medium	Invalid
1156795	CVE-2013-2547	linux-lts-backport-maverick (Ubuntu Raring)	Medium	Invalid
1156795	CVE-2013-2547	linux-lts-backport-natty (Ubuntu Raring)	Undecided	Invalid
1156795	CVE-2013-2547	linux-lts-backport-maverick (Ubuntu Quantal)	Medium	Invalid
1156795	CVE-2013-2547	linux-lts-backport-natty (Ubuntu Quantal)	Undecided	Invalid
1156795	CVE-2013-2547	linux (Ubuntu Precise)	Medium	Fix Released
1156795	CVE-2013-2547	linux-ec2 (Ubuntu Precise)	Medium	Invalid
1156795	CVE-2013-2547	linux-fsl-imx51 (Ubuntu Precise)	Medium	Invalid
1156795	CVE-2013-2547	linux-lts-backport-maverick (Ubuntu Precise)	Medium	Invalid
1156795	CVE-2013-2547	linux-lts-backport-natty (Ubuntu Precise)	Undecided	Invalid
1156795	CVE-2013-2547	linux-mvl-dove (Ubuntu Precise)	Medium	Invalid
1156795	CVE-2013-2547	linux-ti-omap4 (Ubuntu Precise)	Medium	Fix Released
1156795	CVE-2013-2547	linux-lts-backport-maverick (Ubuntu Oneiric)	Medium	Invalid
1156795	CVE-2013-2547	linux-lts-backport-natty (Ubuntu Oneiric)	Undecided	Invalid
1156795	CVE-2013-2547	linux-lts-backport-maverick (Ubuntu Lucid)	Medium	Invalid
1156795	CVE-2013-2547	linux-lts-backport-natty (Ubuntu Lucid)	Undecided	Invalid
1156795	CVE-2013-2547	linux-lts-backport-maverick (Ubuntu Hardy)	Medium	Invalid
1156795	CVE-2013-2547	linux-lts-backport-natty (Ubuntu Hardy)	Undecided	Invalid
1156795	CVE-2013-2547	linux-armadaxp (Ubuntu)	Medium	Invalid
1156795	CVE-2013-2547	linux-armadaxp (Ubuntu Precise)	Medium	Fix Released
1156795	CVE-2013-2547	linux-lts-backport-oneiric (Ubuntu)	Medium	Invalid
1156795	CVE-2013-2547	linux-lts-backport-oneiric (Ubuntu Hardy)	Medium	Invalid
1156795	CVE-2013-2547	linux-lts-backport-oneiric (Ubuntu Lucid)	Medium	Invalid
1156795	CVE-2013-2547	linux-lts-backport-oneiric (Ubuntu Oneiric)	Medium	Invalid
1156795	CVE-2013-2547	linux-lts-backport-oneiric (Ubuntu Precise)	Medium	Invalid
1156795	CVE-2013-2547	linux-lts-backport-oneiric (Ubuntu Quantal)	Medium	Invalid
1156795	CVE-2013-2547	linux-lts-backport-oneiric (Ubuntu Raring)	Medium	Invalid
1156795	CVE-2013-2547	linux-lts-quantal (Ubuntu)	Medium	Invalid
1156795	CVE-2013-2547	linux-lts-quantal (Ubuntu Precise)	Medium	Fix Released
1156795	CVE-2013-2547	linux-lts-trusty (Ubuntu)	Medium	Invalid
1156795	CVE-2013-2547	linux-lts-trusty (Ubuntu Precise)	Medium	Invalid
1156795	CVE-2013-2547	linux (Ubuntu Trusty)	Medium	Invalid
1156795	CVE-2013-2547	linux-armadaxp (Ubuntu Trusty)	Medium	Invalid
1156795	CVE-2013-2547	linux-ec2 (Ubuntu Trusty)	Medium	Invalid
1156795	CVE-2013-2547	linux-fsl-imx51 (Ubuntu Trusty)	Medium	Invalid
1156795	CVE-2013-2547	linux-lts-backport-maverick (Ubuntu Trusty)	Undecided	New
1156795	CVE-2013-2547	linux-lts-backport-natty (Ubuntu Trusty)	Undecided	New
1156795	CVE-2013-2547	linux-lts-backport-oneiric (Ubuntu Trusty)	Undecided	New
1156795	CVE-2013-2547	linux-lts-quantal (Ubuntu Trusty)	Medium	Invalid
1156795	CVE-2013-2547	linux-lts-trusty (Ubuntu Trusty)	Medium	Invalid
1156795	CVE-2013-2547	linux-mvl-dove (Ubuntu Trusty)	Medium	Invalid
1156795	CVE-2013-2547	linux-ti-omap4 (Ubuntu Trusty)	Medium	Invalid
1156795	CVE-2013-2547	linux-lts-backport-maverick (Ubuntu Utopic)	Undecided	Won't Fix
1156795	CVE-2013-2547	linux-lts-backport-natty (Ubuntu Utopic)	Undecided	Won't Fix
1156795	CVE-2013-2547	linux-lts-backport-oneiric (Ubuntu Utopic)	Undecided	Won't Fix
1156795	CVE-2013-2547	linux (Ubuntu Vivid)	Medium	Invalid
1156795	CVE-2013-2547	linux-armadaxp (Ubuntu Vivid)	Medium	Invalid
1156795	CVE-2013-2547	linux-ec2 (Ubuntu Vivid)	Medium	Invalid
1156795	CVE-2013-2547	linux-fsl-imx51 (Ubuntu Vivid)	Medium	Invalid
1156795	CVE-2013-2547	linux-lts-backport-maverick (Ubuntu Vivid)	Medium	Invalid
1156795	CVE-2013-2547	linux-lts-backport-natty (Ubuntu Vivid)	Undecided	Invalid
1156795	CVE-2013-2547	linux-lts-backport-oneiric (Ubuntu Vivid)	Medium	Invalid
1156795	CVE-2013-2547	linux-lts-quantal (Ubuntu Vivid)	Medium	Invalid
1156795	CVE-2013-2547	linux-lts-trusty (Ubuntu Vivid)	Medium	Invalid
1156795	CVE-2013-2547	linux-mvl-dove (Ubuntu Vivid)	Medium	Invalid
1156795	CVE-2013-2547	linux-ti-omap4 (Ubuntu Vivid)	Medium	Invalid
1156795	CVE-2013-2547	linux-goldfish (Ubuntu)	Medium	Invalid
1156795	CVE-2013-2547	linux-goldfish (Ubuntu Precise)	Medium	Invalid
1156795	CVE-2013-2547	linux-goldfish (Ubuntu Trusty)	Medium	Invalid
1156795	CVE-2013-2547	linux-goldfish (Ubuntu Vivid)	Medium	Invalid
1156795	CVE-2013-2547	linux-lts-saucy (Ubuntu)	Undecided	New
1156795	CVE-2013-2547	linux-lts-saucy (Ubuntu Precise)	Undecided	Won't Fix
1156795	CVE-2013-2547	linux-lts-saucy (Ubuntu Trusty)	Undecided	New
1156795	CVE-2013-2547	linux-lts-saucy (Ubuntu Vivid)	Undecided	Won't Fix
1156795	CVE-2013-2547	linux-flo (Ubuntu)	Medium	New
1156795	CVE-2013-2547	linux-flo (Ubuntu Precise)	Medium	Invalid
1156795	CVE-2013-2547	linux-flo (Ubuntu Trusty)	Medium	Invalid
1156795	CVE-2013-2547	linux-flo (Ubuntu Vivid)	Medium	Won't Fix
1156795	CVE-2013-2547	linux-mako (Ubuntu)	Medium	New

Bug #1175091: Cable Ethernet conn. "die" with Atheros Network Card in Ubuntu 13.04

		In	Importance	Status
1175091	Cable Ethernet conn. "die" with Atheros Network Card in Ubuntu 13.04	network-manager (Ubuntu)	Undecided	Fix Released
1175091	Cable Ethernet conn. "die" with Atheros Network Card in Ubuntu 13.04	Fedora	Medium	Invalid
1175091	Cable Ethernet conn. "die" with Atheros Network Card in Ubuntu 13.04	openSUSE	Medium	Fix Released

See the

CVE page on Mitre.org for more details.

Launchpad.net

CVE 2013-2547

Related bugs and status

Related bugs

References