PT-2013-3573 · Linux+4 · Linux Kernel+4

Prasad Pandit · Published 2013-07-04 · Updated 2021-07-15 · CVE-2013-2164

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.11

Description The issue allows local users to obtain sensitive information from kernel memory via a read operation on a malfunctioning CD-ROM drive. This is due to a problem in the mmc ioctl cdrom read data function in drivers/cdrom/cdrom.c.

Recommendations For Linux kernel versions prior to 3.11, update to version 3.11 or later to resolve the issue.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

ALT-PU-2013-1178

CESA-2013_1645

CVE-2013-2164

DSA-2745-1

DSA-2766-1

RHSA-2013:1166

RHSA-2013:1264

RHSA-2013:1645

RHSA-2013_1166

RHSA-2013_1645

SUSE-RU-2015:0621-1

SUSE-SU-2015:0481-1

SUSE-SU-2015:0581-1

SUSE-SU-2015:0652-1

SUSE-SU-2015:0736-1

SUSE-SU-2015:1174-1

SUSE-SU-2015:1376-1

USN-1912-1

USN-1913-1

USN-1931-1

USN-1932-1

USN-1933-1

USN-1934-1

USN-1935-1

USN-1936-1

USN-1941-1

USN-1942-1

Affected Products

Alt Linux

Centos

Linux Kernel

Red Hat

Suse

References · 148

• 🔥 http://git.kernel.org/cgit/linux/kernel/git/next/linux-next.git/commit/drivers/cdrom/cdrom.c?id=050e4b8fb7cdd7096c987a9cd556029c622c7fe2 · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2892 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2013-2164 · Security Note
• https://bdu.fstec.ru/vul/2014-00079 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2888 · Security Note
• http://rhn.redhat.com/errata/RHSA-2013-1166.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1929 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0228 · Security Note
• https://bdu.fstec.ru/vul/2014-00078 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4345 · Security Note
• https://bdu.fstec.ru/vul/2015-05314 · Security Note
• https://ubuntu.com/security/notices/USN-1936-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2014-00080 · Security Note
• https://errata.altlinux.org/ALT-PU-2013-1178 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6537 · Security Note