CVE-2012-6537

LOW
CVSS v3
1.9CVSS v2
0.11% EPSS (exploit probability)
CWE-200CWE

Description

net/xfrm/xfrm_user.c in the Linux kernel before 3.6 does not initialize certain structures, which allows local users to obtain sensitive information from kernel memory by leveraging the CAP_NET_ADMIN capability.

Affected routers (0)

No routers currently mapped to this CVE in our database.

External references