CVE-2013-0160

CVE-2013-0160 describes an information disclosure vulnerability in the Linux kernel, affecting versions up to 3.7.9. A local attacker can leverage the inotify API on the /dev/ptmx device to obtain sensitive keystroke timing information. This vulnerability has a low severity CVSS score of 2.1, indicating a low attack complexity and requiring local access, with the primary impact being confidentiality. While there is no evidence of active exploitation, an exploit demonstrating local disclosure of keystroke timing exists on ExploitDB, and the vulnerability has seen minimal community discussion.