NetSight
IP …
low2.1Public exploit code

CVE-2012-3430

The rds_recvmsg function in net/rds/recv.c in the Linux kernel before 3.0.44 does not initialize a certain structure member, which allows local users to obtain…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

The rds_recvmsg function in net/rds/recv.c in the Linux kernel before 3.0.44 does not initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via a (1) recvfrom or (2) recvmsg system call on an RDS socket.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
through 3.0.43
Versions 3.0.1, 3.0.2, 3.0.3, 3.0.4, 3.0.5

Weakness classification

CWE-200

References