PT-2013-1269 · Linux+4 · Linux Kernel+4

Mathias Krause · Published 2013-12-31 · Updated 2020-05-19 · CVE-2013-7421

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions linux-image versions 3.13.0 through 3.16.0 linux-image versions prior to 3.18.5

Description The issue affects the Linux kernel and can lead to breaches of confidentiality, integrity, and availability of protected information. It can be exploited locally or remotely. The Crypto API in the Linux kernel allows local users to load arbitrary kernel modules via a bind system call for an AF ALG socket with a module name in the salg name field.

Recommendations For linux-image versions 3.13.0 through 3.16.0, update to a version prior to 3.18.5 to resolve the issue. For linux-image versions prior to 3.18.5, update to version 3.18.5 or later to resolve the issue. As a temporary workaround, consider restricting access to the AF ALG socket to minimize the risk of exploitation.

Exploit

Fix

Improper Privilege Management

Weakness Enumeration

CWE-17

CWE-269

Related Identifiers

ALT-PU-2015-1118

ALT-PU-2015-1794

BDU:2015-09845

BDU:2015-09847

CESA-2015_2152

CVE-2013-7421

DSA-3170-1

MGASA-2015-0070

MGASA-2015-0075

MGASA-2015-0076

MGASA-2015-0077

MGASA-2015-0078

RHSA-2015:2152

RHSA-2015:2411

RHSA-2015_2152

RHSA-2015_2411

RHSA-2016:0068

USN-2513-1

USN-2514-1

USN-2543-1

USN-2544-1

USN-2545-1

USN-2546-1

Affected Products

Alt Linux

Centos

Linux Kernel

Red Hat

Ubuntu

References · 118

• 🔥 https://github.com/retme7/CVE-2014-4322_poc · Exploit
• 🔥 https://github.com/panyu6325/CVE-2015-1805 · Exploit
• 🔥 https://github.com/laginimaineb/cve-2014-4322 · Exploit
• 🔥 https://github.com/marcograss/cve-2014-4323 · Exploit
• 🔥 https://github.com/Kagami/docker_cve-2015-2925 · Exploit
• 🔥 https://github.com/FloatingGuy/cve-2015-1805 · Exploit
• 🔥 https://github.com/ireshchaminda1/Android-Privilege-Escalation-Remote-Access-Vulnerability-CVE-2015-1805 · Exploit
• 🔥 https://lkml.org/lkml/2013/3/4/70 · Exploit
• https://github.com/torvalds/linux/commit/5d26a105b5a73e5635eae0629b42fa0a90e07b7b · Patch
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1465 · Security Note
• https://osv.dev/vulnerability/MGASA-2015-0077 · Vendor Advisory
• https://ubuntu.com/security/CVE-2015-1421 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2015-0076.html · Security Note
• https://osv.dev/vulnerability/USN-2544-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1421 · Security Note