Vulnetix
Try Vulnetix Request Demo
CVE-2013-2147 REJECTED

The HP Smart Array controller disk-array driver and Compaq SMART2 controller disk-array driver in the Linux kernel through 3.9.4 do not initialize certain data structures, which allows local users to obtain sensitive information from kernel memory via (1) a crafted IDAGETPCIINFO command for a /dev/ida device, related to the ida_locked_ioctl function in drivers/block/cpqarray.c or (2) a crafted CCISS_PASSTHRU32 command for a /dev/cciss device, related to the cciss_ioctl32_passthru function in drivers/block/cciss.c.

EPSS 0.08% · 22.7th percentile

Risk Scores

EPSS Score
0.08%
22.7th percentile

Affected Products

VendorProductVersions
Ubuntu:14.04:LTSlinux-lts-utopic0
Ubuntu:14.04:LTSlinux-aws0
Ubuntu:16.04:LTSlinux-snapdragon0
Ubuntu:16.04:LTSlinux0
Ubuntu:16.04:LTSlinux-gke0
Ubuntu:14.04:LTSlinux0
Ubuntu:16.04:LTSlinux-raspi20
Ubuntu:16.04:LTSlinux-hwe0
Ubuntu:16.04:LTSlinux-goldfish3.4.0-4.26, 0, 3.4.0-4.24
Ubuntu:14.04:LTSlinux-lts-xenial0
Ubuntu:14.04:LTSlinux-lts-vivid0
Ubuntu:16.04:LTSlinux-aws0
Ubuntu:14.04:LTSlinux-lts-wily0

Timeline

References

Open in Interactive Console →