6

CVE-2013-2851

Format string vulnerability in the register_disk function in block/genhd.c in the Linux kernel through 3.9.4 allows local users to gain privileges by leveraging root access and writing format string specifiers to /sys/module/md_mod/parameters/new_array in order to create a crafted /dev/md device name.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version <= 3.9.4
Linux ≫ Linux Kernel Version 3.9 Update rc1
Linux ≫ Linux Kernel Version 3.9 Update rc2
Linux ≫ Linux Kernel Version 3.9 Update rc3
Linux ≫ Linux Kernel Version 3.9 Update rc4
Linux ≫ Linux Kernel Version 3.9 Update rc5
Linux ≫ Linux Kernel Version 3.9 Update rc6
Linux ≫ Linux Kernel Version 3.9 Update rc7
Linux ≫ Linux Kernel Version 3.9.0
Linux ≫ Linux Kernel Version 3.9.1
Linux ≫ Linux Kernel Version 3.9.2
Linux ≫ Linux Kernel Version 3.9.3
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.34% 0.256
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6 1.5 10
AV:L/AC:H/Au:S/C:C/I:C/A:C
CWE-134 Use of Externally-Controlled Format String

The product uses a function that accepts a format string as an argument, but the format string originates from an external source.

http://rhn.redhat.com/errata/RHSA-2013-1783.html
http://rhn.redhat.com/errata/RHSA-2013-1645.html
http://lists.opensuse.org/opensuse-security-announce/2013-09/msg00004.html
http://lists.opensuse.org/opensuse-security-announce/2013-09/msg00003.html
http://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html
http://www.debian.org/security/2013/dsa-2766
http://marc.info/?l=linux-kernel&m=137055204522556&w=2
http://rhn.redhat.com/errata/RHSA-2014-0284.html
http://www.openwall.com/lists/oss-security/2013/06/06/13
http://www.ubuntu.com/usn/USN-1912-1
http://www.ubuntu.com/usn/USN-1913-1
http://www.ubuntu.com/usn/USN-1941-1
http://www.ubuntu.com/usn/USN-1942-1
https://bugzilla.redhat.com/show_bug.cgi?id=969515