CVE-2012-3430
Linux Kernel < 3.0.44 - Information Exposure via Uninitialized Structure in RDS recvmsg
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2012-3430. PoCs published by Jay Fenlason.
AI-analyzed exploit summary This exploit demonstrates a local information disclosure vulnerability in the Linux kernel's RDS (Reliable Datagram Sockets) implementation. By manipulating the `msg.msg_namelen` field in `recvmsg()`, the code triggers a kernel memory leak, overwriting adjacent stack memory.
Description
The rds_recvmsg function in net/rds/recv.c in the Linux kernel before 3.0.44 does not initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via a (1) recvfrom or (2) recvmsg system call on an RDS socket.
Exploits (1)
This exploit demonstrates a local information disclosure vulnerability in the Linux kernel's RDS (Reliable Datagram Sockets) implementation. By manipulating the `msg.msg_namelen` field in `recvmsg()`, the code triggers a kernel memory leak, overwriting adjacent stack memory.