CVE-2012-3430
Linux Kernel < 3.0.43 - Information Disclosure
Title source: ruleDescription
The rds_recvmsg function in net/rds/recv.c in the Linux kernel before 3.0.44 does not initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via a (1) recvfrom or (2) recvmsg system call on an RDS socket.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by Jay Fenlason · clocallinux
https://www.exploit-db.com/exploits/37543
References (18)
Scores
EPSS
0.0018
EPSS Percentile
39.0%
Details
CWE
CWE-200
Status
published
Products (43)
linux/linux_kernel
3.0.1
linux/linux_kernel
3.0.2
linux/linux_kernel
3.0.3
linux/linux_kernel
3.0.4
linux/linux_kernel
3.0.5
linux/linux_kernel
3.0.6
linux/linux_kernel
3.0.7
linux/linux_kernel
3.0.8
linux/linux_kernel
3.0.9
linux/linux_kernel
3.0.10
... and 33 more
Published
Oct 03, 2012
Tracked Since
Feb 18, 2026