PT-2013-4009 · Linux+2 · Linux Kernel+2

Kees Cook · Publicado 2013-09-13 · Atualizado 2014-04-02 · CVE-2013-2890

Positive Technologies (AI Summary)

CVSS v2.0

4.7

Média

Vetor base

AV:L/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.12

Description The issue allows physically proximate attackers to cause a denial of service via a crafted device, specifically through the Human Interface Device (HID) subsystem when CONFIG HID SONY is enabled. This is due to a heap-based out-of-bounds write in the drivers/hid/hid-sony.c file.

Recommendations For Linux kernel versions prior to 3.12, update to version 3.12 or later to resolve the issue.

Exploit

Correção

DoS

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

ALT-PU-2014-1422

CVE-2013-2890

Produtos afetados

Alt Linux

Linux Kernel

Suse

Referências · 154

• 🔥 https://github.com/luan0ap/cve-2018-14634 · Exploit
• https://github.com/torvalds/linux/commit/2433c8f094a008895e66f25bd1773cdb01c91d01 · Nota
• https://github.com/torvalds/linux/commit/2690d97ade05c5325cbf7c72b94b90d265659886 · Nota
• https://github.com/torvalds/linux/commit/a399b29dfbaaaf91162b2dc5a5875dd51bbfa2a1 · Nota
• https://github.com/torvalds/linux/commit/12ae030d54ef250706da5642fc7697cc60ad0df7 · Nota
• https://github.com/torvalds/linux/commit/95ee62083cb6453e056562d91f597552021e6ae7 · Nota
• https://github.com/torvalds/linux/commit/6fb392b1a63ae36c31f62bc3fc8630b49d602b62 · Nota
• https://github.com/torvalds/linux/commit/201f99f170df14ba52ea4c52847779042b7a623b · Nota
• https://github.com/torvalds/linux/commit/e93b7d748be887cd7639b113ba7d7ef792a7efb9 · Nota
• https://github.com/torvalds/linux/commit/2811ebac2521ceac84f2bdae402455baa6a7fb47 · Nota
• https://github.com/torvalds/linux/commit/c547dbf55d5f8cf615ccc0e7265e98db27d3fb8b · Nota
• https://github.com/torvalds/linux/commit/d049f74f2dbe71354d43d393ac3a188947811348 · Nota
• https://github.com/torvalds/linux/commit/a8b33654b1e3b0c74d4a1fed041c9aae50b3c427 · Nota
• https://github.com/torvalds/linux/commit/b4789b8e6be3151a955ade74872822f30e8cd914 · Nota
• https://github.com/torvalds/linux/commit/f5563318ff1bde15b10e736e97ffce13be08bc1a · Nota