PT-2013-3582 · Red Hat+1 · Red Hat+1

Mateusz Guzik · Publicado 2013-06-10 · Atualizado 2019-04-22 · CVE-2013-2188

Positive Technologies (AI Summary)

CVSS v2.0

4.7

Média

Vetor base

AV:L/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Red Hat Enterprise Linux (RHEL) 6 kernel package versions prior to 2.6.32-358.11.1.el6

Description The issue is related to a problem in the do filp open function in fs/namei.c, where failure to obtain write permissions is not handled properly. This can be exploited by local users to cause a denial of service, resulting in a system crash, by accessing a filesystem that is mounted read-only.

Recommendations For Red Hat Enterprise Linux (RHEL) 6 kernel package versions prior to 2.6.32-358.11.1.el6, update to version 2.6.32-358.11.1.el6 or later to resolve the issue.

Correção

DoS

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CESA-2013_0911

CVE-2013-2188

RHSA-2013:0911

RHSA-2013_0911

Produtos afetados

Centos

Red Hat

Referências · 16

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2188 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1935 · Nota de Segurança
• https://bugzilla.redhat.com/show_bug.cgi?id=975406 · Nota
• https://access.redhat.com/security/cve/CVE-2013-1935 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2017 · Nota de Segurança
• https://lists.centos.org/pipermail/centos-announce/2013-June/081946.html · Nota
• https://lists.centos.org/pipermail/centos-announce/2013-June/031822.html · Nota
• https://access.redhat.com/security/cve/CVE-2013-2188 · Nota
• https://lists.centos.org/pipermail/centos-announce/2013-June/056703.html · Nota
• https://access.redhat.com/errata/RHSA-2013:0911 · Nota
• https://rhn.redhat.com/errata/RHSA-2013-0911.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-2188 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1943 · Nota de Segurança
• https://lists.centos.org/pipermail/centos-announce/2013-June/069259.html · Nota
• https://access.redhat.com/security/cve/CVE-2013-1943 · Nota