PT-2013-2708 · Linux+3 · Linux Kernel+3

Emese Revfy · Publicado 2013-03-22 · Atualizado 2014-02-07 · CVE-2013-0914

Positive Technologies (AI Summary)

CVSS v2.0

3.6

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.8.4

Description The issue allows local users to bypass the ASLR protection mechanism. This is achieved through a crafted application containing a sigaction system call, which exploits the preservation of the sa restorer field value across an exec operation by the flush signal handlers function in kernel/signal.c.

Recommendations For Linux kernel versions prior to 3.8.4, update to version 3.8.4 or later to resolve the issue. As a temporary workaround, consider restricting the use of the sigaction system call until a patch is available.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CESA-2013_1051

CVE-2013-0914

DSA-2668-1

OPENSUSE-SU-2013_1187-1

RHSA-2013:0829

RHSA-2013:1034

RHSA-2013:1051

RHSA-2013:1080

RHSA-2013_1034

RHSA-2013_1051

SUSE-SU-2015:0481-1

SUSE-SU-2015:0652-1

USN-1787-1

USN-1788-1

USN-1792-1

USN-1793-1

USN-1794-1

USN-1795-1

USN-1796-1

USN-1797-1

USN-1798-1

Produtos afetados

Centos

Linux Kernel

Red Hat

Suse

Referências · 38

• https://github.com/torvalds/linux/commit/2ca39528c01a933f6689cd6505ce65bd6d68a530 · Nota
• https://osv.dev/vulnerability/UBUNTU-CVE-2013-0914 · Aviso do Fabricante
• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=2ca39528c01a933f6689cd6505ce65bd6d68a530 · Nota
• http://openwall.com/lists/oss-security/2013/03/11/8 · Nota
• http://mandriva.com/security/advisories?name=MDVSA-2013:176 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2013-0914 · Nota de Segurança
• https://bugzilla.redhat.com/show_bug.cgi?id=920499 · Nota
• http://kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.8.4 · Nota
• https://linux.oracle.com/errata/ELSA-2013-1051.html · Aviso do Fabricante
• https://ubuntu.com/security/notices/USN-1798-1 · Aviso do Fabricante
• http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00018.html · Aviso do Fabricante
• https://ubuntu.com/security/notices/USN-1793-1 · Aviso do Fabricante
• https://lkml.org/lkml/2013/3/11/498 · Nota
• http://ubuntu.com/usn/USN-1794-1 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2013-0914 · Aviso do Fabricante