Wind River Support Network


LIN5-17812 : Security Advisory - linux - CVE-2013-7267

Created: Jan 15, 2014    Updated: Dec 19, 2017
Resolved Date: Feb 9, 2014
Found In Version:
Fix Version:
Severity: Standard
Applicable for: Wind River Linux 5
Component/s: Kernel


The atalk_recvmsg function in net/appletalk/ddp.c in the Linux kernel before 3.12.4 updates a certain length value without ensuring that an associated data structure has been initialized, which allows local users to obtain sensitive information from kernel memory via a (1) recvfrom, (2) recvmmsg, or (3) recvmsg system call.

Other Downloads

Live chat