PT-2013-3413 · Linux · Linux Kernel

Petr Matousek · Published 2013-03-22 · Updated 2023-08-11 · CVE-2013-1828

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.8.4

Description The issue concerns a function in the Linux kernel that does not properly validate a size value before performing a specific operation, allowing local users to potentially gain privileges. This is achieved through a crafted application that utilizes a particular system call.

Recommendations For Linux kernel versions prior to 3.8.4, update to version 3.8.4 or later to resolve the issue. As a temporary workaround, consider restricting access to the sctp getsockopt assoc stats function until a patch is available.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2013-1828

Affected Products

Linux Kernel

References · 12

• 🔥 https://github.com/torvalds/linux/commit/726bc6b092da4c093eb74d13c07184b18c1af0f1 · Exploit
• 🔥 http://grsecurity.net/~spender/sctp.c · Exploit
• 🔥 http://exploit-db.com/exploits/24747 · Exploit
• 🔥 https://exploit-db.com/exploits/24747 · Exploit
• 🔥 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=726bc6b092da4c093eb74d13c07184b18c1af0f1 · Exploit
• http://kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.8.4 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2013-1828 · Security Note
• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=726bc6b092da4c093eb74d13c07184b18c1af0f1 · Vendor Advisory
• http://openwall.com/lists/oss-security/2013/03/08/2 · Note
• https://twitter.com/geekphane/status/1690100680944656384 · Twitter Post
• https://bugzilla.redhat.com/show_bug.cgi?id=919315 · Note
• http://twitter.com/grsecurity/statuses/309805924749541376 · Note