PT-2013-4047 · Linux+2 · Linux Kernel+2

Dave Jones

+1

·

Publicado

2013-11-30

·

Atualizado

2014-04-27

·

CVE-2013-2930

CVSS v2.0

3.6

Baixa

VetorAV:L/AC:L/Au:N/C:P/I:P/A:N
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.12.2
Description The issue is related to the perf trace event perm function in the Linux kernel, which does not properly restrict access to the perf subsystem. This allows local users to enable function tracing via a crafted application.
Recommendations For versions prior to 3.12.2, update to version 3.12.2 or later to resolve the issue.

Exploit

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

ALT-PU-2013-1221
ALT-PU-2013-1222
ALT-PU-2013-1236
ALT-PU-2014-1422
ALT-PU-2014-1547
CVE-2013-2930
MGASA-2013-0371
MGASA-2013-0372
MGASA-2013-0373
MGASA-2013-0374
MGASA-2013-0375
RHSA-2014:0100
SUSE-RU-2015:0621-1
SUSE-SU-2015:0581-1
SUSE-SU-2015:0736-1
SUSE-SU-2015:1174-1
SUSE-SU-2015:1376-1
USN-2068-1
USN-2070-1
USN-2071-1
USN-2072-1
USN-2074-1
USN-2075-1
USN-2076-1
USN-2112-1

Produtos afetados

Alt Linux
Linux Kernel
Suse