PT-2013-3607 · Linux+2 · Linux Kernel+2

Prasad Pandit · Publicado 2013-07-04 · Atualizado 2023-02-13 · CVE-2013-2224

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Média

Vetor base

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Red Hat Enterprise Linux (RHEL) 6 with Linux kernel 2.6.32

Description The issue allows local users to cause a denial of service, resulting in an invalid free operation and system crash, or possibly gain privileges. This is achieved via a sendmsg system call with the IP RETOPTS option.

Recommendations For Red Hat Enterprise Linux (RHEL) 6 with Linux kernel 2.6.32, consider applying the correct patch to resolve the issue, as the existing patch is incorrect and introduces this problem.

Correção

Identificadores relacionados

CESA-2013_1173

CVE-2013-2224

RHSA-2013:1166

RHSA-2013:1173

RHSA-2013:1195

RHSA-2013:1450

RHSA-2013_1166

RHSA-2013_1173

Produtos afetados

Centos

Linux Kernel

Red Hat

Referências · 42

• https://github.com/torvalds/linux/commit/a5cc68f3d63306d0d288f31edfc2ae6ef8ecd887 · Nota
• https://github.com/torvalds/linux/commit/a963a37d384d71ad43b3e9e79d68d42fbe0901f3 · Nota
• https://github.com/torvalds/linux/commit/85dfb745ee40232876663ae206cba35f24ab2a40 · Nota
• https://github.com/torvalds/linux/commit/f1923820c447e986a9da0fc6bf60c1dccdf0408e · Nota
• https://github.com/torvalds/linux/commit/f2815633504b442ca0b0605c16bf3d88a3a0fcea · Nota
• https://access.redhat.com/security/cve/CVE-2013-2224 · Nota
• https://bdu.fstec.ru/vul/2014-00086 · Nota de Segurança
• https://lists.centos.org/pipermail/centos-announce/2013-August/069393.html · Nota
• https://access.redhat.com/security/cve/CVE-2013-2164 · Nota
• https://access.redhat.com/security/cve/CVE-2013-2206 · Nota
• https://rhn.redhat.com/errata/RHSA-2013-1173.html · Nota
• http://openwall.com/lists/oss-security/2013/06/30/7 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2224 · Nota de Segurança
• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=85dfb745ee40232876663ae206cba35f24ab2a40 · Nota
• https://lists.centos.org/pipermail/centos-announce/2013-August/031956.html · Nota