CVE-2013-5209

Related Files

Debian Security Advisory 2743-1

Posted Aug 27, 2013

Authored by Debian | Site debian.org

Debian Linux Security Advisory 2743-1 - Several vulnerabilities have been discovered in the FreeBSD kernel that may lead to a privilege escalation or information leak.

tags | advisory, kernel, vulnerability

systems | linux, freebsd, debian

advisories | CVE-2013-3077, CVE-2013-4851, CVE-2013-5209

SHA-256 | 569d8b0cda13d3a73e841bf15e6cefd040a645974771d3bc8fc7fc5adeea0929

Download | Favorite | View

FreeBSD Security Advisory - sctp Kernel Memory Disclosure

Posted Aug 23, 2013

Authored by Michael Tuexen, Julian Seward | Site security.freebsd.org

FreeBSD Security Advisory - When initializing the SCTP state cookie being sent in INIT-ACK chunks, a buffer allocated from the kernel stack is not completely initialized. Fragments of kernel memory may be included in SCTP packets and transmitted over the network. For each SCTP session, there are two separate instances in which a 4-byte fragment may be transmitted. This memory might contain sensitive information, such as portions of the file cache or terminal buffers. This information might be directly useful, or it might be leveraged to obtain elevated privileges in some way. For example, a terminal buffer might include an user-entered password.

tags | advisory, kernel

systems | freebsd

advisories | CVE-2013-5209

SHA-256 | 31263b7b248f107d5f7ed98d3b388e63dc69a3862d01f93e4c9b344f9c86de7c

Download | Favorite | View