PT-2013-1027 · Linux+1 · Linux Kernel+1

Fabian Yamaguchi + 1 · Published 2013-11-12 · Updated 2023-02-13 · CVE-2013-4512

Positive Technologies (AI Summary)

CVSS v2.0

4.7

Medium

Base vector

AV:L/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.12

Description The issue is related to a buffer overflow in the exitcode proc write function, which can be exploited by local users with write privileges to the /proc/exitcode file. This could potentially allow users to cause a denial of service or have other unspecified impacts, possibly including privilege escalation. The estimated number of potentially affected devices is not specified.

Recommendations For Linux kernel versions prior to 3.12, update to version 3.12 or later to resolve the issue. As a temporary workaround, consider restricting write access to the /proc/exitcode file to minimize the risk of exploitation.

Exploit

Fix

DoS

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

ALT-PU-2013-1133

ALT-PU-2014-1422

BDU:2014-00093

CVE-2013-4512

DSA-2906-1

Affected Products

Alt Linux

Linux Kernel

References · 16

• 🔥 https://github.com/torvalds/linux/commit/201f99f170df14ba52ea4c52847779042b7a623b · Exploit
• 🔥 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=201f99f170df14ba52ea4c52847779042b7a623b · Exploit
• https://cve.org/CVERecord?id=CVE-2013-4512 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2013-4512 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2013-4512 · Vendor Advisory
• https://ubuntu.com/security/CVE-2013-4512 · Vendor Advisory
• https://bdu.fstec.ru/vul/2014-00093 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4512 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2013-4512 · Security Note
• https://osv.dev/vulnerability/CVE-2013-4512 · Vendor Advisory
• https://kernel.org/pub/linux/kernel/v3.x/patch-3.12.bz2 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2013-4512 · Vendor Advisory
• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=201f99f170df14ba52ea4c52847779042b7a623b · Note
• https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=201f99f170df14ba52ea4c52847779042b7a623b · Note
• http://securityfocus.com/bid/63510 · Note