PT-2013-6247 · Linux+2 · Linux Kernel+2

Evan Huus · Publicado 2013-11-05 · Atualizado 2014-04-02 · CVE-2013-7027

Positive Technologies (AI Summary)

CVSS v2.0

6.1

Média

Vetor base

AV:A/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.11.7

Description The issue is related to the ieee80211 radiotap iterator init function in the Linux kernel, which does not properly check for data outside of the header in a frame. This could potentially allow attackers to cause a denial of service through a buffer over-read by crafting a malicious header.

Recommendations For versions prior to 3.11.7, update to version 3.11.7 or later to resolve the issue.

Exploit

Correção

DoS

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

ALT-PU-2013-1053

ALT-PU-2014-1422

CVE-2013-7027

OPENSUSE-SU-2014_0204-1

SUSE-RU-2015:0621-1

SUSE-SU-2015:0481-1

SUSE-SU-2015:0581-1

SUSE-SU-2015:0652-1

SUSE-SU-2015:0736-1

SUSE-SU-2015:1174-1

SUSE-SU-2015:1376-1

USN-2042-1

USN-2049-1

USN-2066-1

USN-2067-1

USN-2068-1

USN-2069-1

USN-2071-1

USN-2072-1

USN-2073-1

USN-2074-1

USN-2076-1

USN-2128-1

USN-2129-1

Produtos afetados

Alt Linux

Linux Kernel

Suse

Referências · 243

• 🔥 https://github.com/torvalds/linux/commit/f5563318ff1bde15b10e736e97ffce13be08bc1a · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/recvmmsg_priv_esc.rb · Exploit
• 🔥 https://github.com/saelo/cve-2014-0038 · Exploit
• 🔥 https://github.com/luan0ap/cve-2018-14634 · Exploit
• 🔥 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=f5563318ff1bde15b10e736e97ffce13be08bc1a · Exploit
• https://github.com/torvalds/linux/commit/12ae030d54ef250706da5642fc7697cc60ad0df7 · Nota
• https://github.com/torvalds/linux/commit/929473ea05db455ad88cdc081f2adc556b8dc48f · Nota
• https://github.com/torvalds/linux/commit/d049f74f2dbe71354d43d393ac3a188947811348 · Nota
• https://github.com/torvalds/linux/commit/c547dbf55d5f8cf615ccc0e7265e98db27d3fb8b · Nota
• https://github.com/torvalds/linux/commit/2811ebac2521ceac84f2bdae402455baa6a7fb47 · Nota
• https://github.com/torvalds/linux/commit/95ee62083cb6453e056562d91f597552021e6ae7 · Nota
• https://github.com/torvalds/linux/commit/2690d97ade05c5325cbf7c72b94b90d265659886 · Nota
• https://github.com/torvalds/linux/commit/201f99f170df14ba52ea4c52847779042b7a623b · Nota
• https://github.com/torvalds/linux/commit/6fb392b1a63ae36c31f62bc3fc8630b49d602b62 · Nota
• https://github.com/torvalds/linux/commit/a8b33654b1e3b0c74d4a1fed041c9aae50b3c427 · Nota