CVE-2012-3430

Linux Kernel < 3.0.43 - Information Disclosure

Title source: rule

Description

The rds_recvmsg function in net/rds/recv.c in the Linux kernel before 3.0.44 does not initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via a (1) recvfrom or (2) recvmsg system call on an RDS socket.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Jay Fenlason · clocallinux
https://www.exploit-db.com/exploits/37543

Scores

EPSS 0.0018
EPSS Percentile 39.0%

Details

CWE
CWE-200
Status published
Products (43)
linux/linux_kernel 3.0.1
linux/linux_kernel 3.0.2
linux/linux_kernel 3.0.3
linux/linux_kernel 3.0.4
linux/linux_kernel 3.0.5
linux/linux_kernel 3.0.6
linux/linux_kernel 3.0.7
linux/linux_kernel 3.0.8
linux/linux_kernel 3.0.9
linux/linux_kernel 3.0.10
... and 33 more
Published Oct 03, 2012
Tracked Since Feb 18, 2026