PT-2013-3573 · Linux+4 · Linux Kernel+4

Prasad Pandit · Publicado 2013-07-04 · Atualizado 2021-07-15 · CVE-2013-2164

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.11

Description The issue allows local users to obtain sensitive information from kernel memory via a read operation on a malfunctioning CD-ROM drive. This is due to a problem in the mmc ioctl cdrom read data function in drivers/cdrom/cdrom.c.

Recommendations For Linux kernel versions prior to 3.11, update to version 3.11 or later to resolve the issue.

Exploit

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

ALT-PU-2013-1178

CESA-2013_1645

CVE-2013-2164

DSA-2745-1

DSA-2766-1

RHSA-2013:1166

RHSA-2013:1264

RHSA-2013:1645

RHSA-2013_1166

RHSA-2013_1645

SUSE-RU-2015:0621-1

SUSE-SU-2015:0481-1

SUSE-SU-2015:0581-1

SUSE-SU-2015:0652-1

SUSE-SU-2015:0736-1

SUSE-SU-2015:1174-1

SUSE-SU-2015:1376-1

USN-1912-1

USN-1913-1

USN-1931-1

USN-1932-1

USN-1933-1

USN-1934-1

USN-1935-1

USN-1936-1

USN-1941-1

USN-1942-1

Produtos afetados

Alt Linux

Centos

Linux Kernel

Red Hat

Suse

Referências · 148

• 🔥 http://git.kernel.org/cgit/linux/kernel/git/next/linux-next.git/commit/drivers/cdrom/cdrom.c?id=050e4b8fb7cdd7096c987a9cd556029c622c7fe2 · Exploit
• https://github.com/torvalds/linux/commit/7d3e91a89b7adbc2831334def9e494dd9892f9af · Nota
• https://github.com/torvalds/linux/commit/a963a37d384d71ad43b3e9e79d68d42fbe0901f3 · Nota
• https://github.com/torvalds/linux/commit/f2815633504b442ca0b0605c16bf3d88a3a0fcea · Nota
• https://github.com/torvalds/linux/commit/e40f193f5bb022e927a57a4f5d5194e4f12ddb74 · Nota
• https://github.com/torvalds/linux/commit/12d6e7538e2d418c08f082b1b44ffa5fb7270ed8 · Nota
• https://github.com/torvalds/linux/commit/a5cc68f3d63306d0d288f31edfc2ae6ef8ecd887 · Nota
• https://github.com/torvalds/linux/commit/715230a44310a8cf66fbfb5a46f9a62a9b2de424 · Nota
• https://github.com/torvalds/linux/commit/2811ebac2521ceac84f2bdae402455baa6a7fb47 · Nota
• https://github.com/torvalds/linux/commit/85dfb745ee40232876663ae206cba35f24ab2a40 · Nota
• https://github.com/torvalds/linux/commit/276bdb82dedb290511467a5a4fdbe9f0b52dce6f · Nota
• https://github.com/torvalds/linux/commit/5f00110f7273f9ff04ac69a5f85bb535a4fd0987 · Nota
• https://github.com/torvalds/linux/commit/a2c118bfab8bc6b8bb213abfc35201e441693d55 · Nota
• https://github.com/torvalds/linux/commit/9899d11f654474d2d54ea52ceaa2a1f4db3abd68 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2892 · Nota de Segurança