PT-2013-5051 · Linux+2 · Linux Kernel+2

Fabian Yamaguchi + 1 · Publicado 2013-11-07 · Atualizado 2023-12-15 · CVE-2013-4511

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Média

Vetor base

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.12

Description The issue is related to multiple integer overflows in Alchemy LCD frame-buffer drivers. Local users can create a read-write memory mapping for the entirety of kernel memory and gain privileges via crafted mmap operations. This is related to the au1100fb fb mmap function in drivers/video/au1100fb.c and the au1200fb fb mmap function in drivers/video/au1200fb.c.

Recommendations For Linux kernel versions prior to 3.12, update to version 3.12 or later to resolve the issue. As a temporary workaround, consider restricting access to the au1100fb fb mmap and au1200fb fb mmap functions until a patch is available.

Exploit

Correção

Enumeração de Fraquezas

CWE-189

Identificadores relacionados

ALT-PU-2013-1060

ALT-PU-2013-1061

ALT-PU-2013-1133

ALT-PU-2014-1422

CVE-2013-4511

DSA-2906-1

OPENSUSE-SU-2014_0204-1

OPENSUSE-SU-2014_0205-1

SUSE-RU-2015:0621-1

SUSE-SU-2015:0481-1

SUSE-SU-2015:0581-1

SUSE-SU-2015:0652-1

SUSE-SU-2015:0736-1

SUSE-SU-2015:1174-1

SUSE-SU-2015:1376-1

USN-2036-1

USN-2037-1

USN-2066-1

USN-2067-1

USN-2068-1

USN-2069-1

USN-2070-1

USN-2071-1

USN-2072-1

USN-2073-1

USN-2074-1

USN-2075-1

USN-2076-1

Produtos afetados

Alt Linux

Linux Kernel

Suse

Referências · 264

• 🔥 https://github.com/torvalds/linux/commit/7314e613d5ff9f0934f7a0f74ed7973b903315d1 · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/recvmmsg_priv_esc.rb · Exploit
• 🔥 https://github.com/saelo/cve-2014-0038 · Exploit
• 🔥 https://github.com/luan0ap/cve-2018-14634 · Exploit
• 🔥 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=7314e613d5ff9f0934f7a0f74ed7973b903315d1 · Exploit
• https://github.com/torvalds/linux/commit/c547dbf55d5f8cf615ccc0e7265e98db27d3fb8b · Nota
• https://github.com/torvalds/linux/commit/2811ebac2521ceac84f2bdae402455baa6a7fb47 · Nota
• https://github.com/torvalds/linux/commit/95ee62083cb6453e056562d91f597552021e6ae7 · Nota
• https://github.com/torvalds/linux/commit/2690d97ade05c5325cbf7c72b94b90d265659886 · Nota
• https://github.com/torvalds/linux/commit/6fb392b1a63ae36c31f62bc3fc8630b49d602b62 · Nota
• https://github.com/torvalds/linux/commit/a8b33654b1e3b0c74d4a1fed041c9aae50b3c427 · Nota
• https://github.com/torvalds/linux/commit/12ae030d54ef250706da5642fc7697cc60ad0df7 · Nota
• https://github.com/torvalds/linux/commit/d049f74f2dbe71354d43d393ac3a188947811348 · Nota
• https://github.com/torvalds/linux/commit/201f99f170df14ba52ea4c52847779042b7a623b · Nota
• https://github.com/torvalds/linux/commit/e93b7d748be887cd7639b113ba7d7ef792a7efb9 · Nota