6

CVE-2013-2851

Format string vulnerability in the register_disk function in block/genhd.c in the Linux kernel through 3.9.4 allows local users to gain privileges by leveraging root access and writing format string specifiers to /sys/module/md_mod/parameters/new_array in order to create a crafted /dev/md device name.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version <= 3.9.4
Linux ≫ Linux Kernel Version3.9 Updaterc1
Linux ≫ Linux Kernel Version3.9 Updaterc2
Linux ≫ Linux Kernel Version3.9 Updaterc3
Linux ≫ Linux Kernel Version3.9 Updaterc4
Linux ≫ Linux Kernel Version3.9 Updaterc5
Linux ≫ Linux Kernel Version3.9 Updaterc6
Linux ≫ Linux Kernel Version3.9 Updaterc7
Linux ≫ Linux Kernel Version3.9.0
Linux ≫ Linux Kernel Version3.9.1
Linux ≫ Linux Kernel Version3.9.2
Linux ≫ Linux Kernel Version3.9.3
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.34% 0.256
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6 1.5 10
AV:L/AC:H/Au:S/C:C/I:C/A:C
CWE-134 Use of Externally-Controlled Format String

The product uses a function that accepts a format string as an argument, but the format string originates from an external source.

http://rhn.redhat.com/errata/RHSA-2013-1783.html
http://rhn.redhat.com/errata/RHSA-2013-1645.html
http://lists.opensuse.org/opensuse-security-announce/2013-09/msg00004.html
http://lists.opensuse.org/opensuse-security-announce/2013-09/msg00003.html
http://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html
http://www.debian.org/security/2013/dsa-2766
http://marc.info/?l=linux-kernel&m=137055204522556&w=2
http://rhn.redhat.com/errata/RHSA-2014-0284.html
http://www.openwall.com/lists/oss-security/2013/06/06/13
http://www.ubuntu.com/usn/USN-1912-1
http://www.ubuntu.com/usn/USN-1913-1
http://www.ubuntu.com/usn/USN-1941-1
http://www.ubuntu.com/usn/USN-1942-1
https://bugzilla.redhat.com/show_bug.cgi?id=969515