PT-2013-4993 · Systemd · Systemd

Florian Weimer + 1 · Publicado 2013-10-28 · Atualizado 2022-01-31 · CVE-2013-4391

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions systemd (affected versions not specified)

Description The issue is related to an integer overflow in the valid user field function, which can be triggered by a large journal data field. This can cause a denial of service (crash) and potentially allow the execution of arbitrary code due to a heap-based buffer overflow.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Integer Overflow

Enumeração de Fraquezas

CWE-190

Identificadores relacionados

CVE-2013-4391

DSA-2777-1

Produtos afetados

Systemd

Referências · 10

• 🔥 http://cgit.freedesktop.org/systemd/systemd/commit/?id=505b6a61c22d5565e9308045c7b9bf79f7d0517e · Exploit
• https://osv.dev/vulnerability/CVE-2013-4391 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2013-4391 · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2013/10/01/9 · Nota
• http://debian.org/security/2013/dsa-2777 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2013-4391 · Nota de Segurança
• https://osv.dev/vulnerability/DEBIAN-CVE-2013-4391 · Aviso do Fabricante
• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=725357 · Correção
• https://bugzilla.redhat.com/show_bug.cgi?id=859051 · Correção
• https://security.gentoo.org/glsa/201612-34 · Aviso do Fabricante