PT-2013-3972 · Linux+4 · Linux Kernel+4

Kees Cook · Publicado 2013-06-07 · Atualizado 2014-03-26 · CVE-2013-2851

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Média

Vetor base

AV:L/AC:H/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.9.4

Description The issue allows local users to gain privileges by leveraging root access and writing format string specifiers to /sys/module/md mod/parameters/new array in order to create a crafted /dev/md device name. This is due to a format string vulnerability in the register disk function in block/genhd.c.

Recommendations For Linux kernel versions prior to 3.9.4, update to version 3.9.4 or later to resolve the issue. As a temporary workaround, consider restricting access to the /sys/module/md mod/parameters/new array file to minimize the risk of exploitation.

Correção

Use of Externally-Controlled Format String

Enumeração de Fraquezas

CWE-134

Identificadores relacionados

ALT-PU-2013-1178

CESA-2013_1645

CVE-2013-2851

DSA-2745-1

DSA-2766-1

MGASA-2013-0371

MGASA-2013-0372

MGASA-2013-0373

MGASA-2013-0374

MGASA-2013-0375

RHSA-2013:1264

RHSA-2013:1645

RHSA-2013:1783

RHSA-2013_1645

RHSA-2014:0284

SUSE-RU-2015:0621-1

SUSE-SU-2015:0481-1

SUSE-SU-2015:0581-1

SUSE-SU-2015:0652-1

SUSE-SU-2015:0736-1

SUSE-SU-2015:1174-1

SUSE-SU-2015:1376-1

USN-1912-1

USN-1913-1

USN-1931-1

USN-1932-1

USN-1933-1

USN-1934-1

USN-1935-1

USN-1936-1

USN-1941-1

USN-1942-1

Produtos afetados

Alt Linux

Centos

Linux Kernel

Red Hat

Suse

Referências · 177

• https://github.com/torvalds/linux/commit/7d3e91a89b7adbc2831334def9e494dd9892f9af · Nota
• https://github.com/torvalds/linux/commit/e40f193f5bb022e927a57a4f5d5194e4f12ddb74 · Nota
• https://github.com/torvalds/linux/commit/12d6e7538e2d418c08f082b1b44ffa5fb7270ed8 · Nota
• https://github.com/torvalds/linux/commit/a5cc68f3d63306d0d288f31edfc2ae6ef8ecd887 · Nota
• https://github.com/torvalds/linux/commit/715230a44310a8cf66fbfb5a46f9a62a9b2de424 · Nota
• https://github.com/torvalds/linux/commit/2811ebac2521ceac84f2bdae402455baa6a7fb47 · Nota
• https://github.com/torvalds/linux/commit/276bdb82dedb290511467a5a4fdbe9f0b52dce6f · Nota
• https://github.com/torvalds/linux/commit/5f00110f7273f9ff04ac69a5f85bb535a4fd0987 · Nota
• https://github.com/torvalds/linux/commit/a2c118bfab8bc6b8bb213abfc35201e441693d55 · Nota
• https://github.com/torvalds/linux/commit/9899d11f654474d2d54ea52ceaa2a1f4db3abd68 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2892 · Nota de Segurança
• https://ubuntu.com/security/CVE-2013-2851 · Aviso do Fabricante
• https://advisories.mageia.org/MGASA-2013-0374.html · Nota de Segurança
• https://osv.dev/vulnerability/UBUNTU-CVE-2013-2851 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2013-2851 · Nota de Segurança