PT-2013-3582 · Red Hat+1 · Red Hat+1

Mateusz Guzik · Published 2013-06-10 · Updated 2019-04-22 · CVE-2013-2188

Positive Technologies (AI Summary)

CVSS v2.0

4.7

Medium

Base vector

AV:L/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Red Hat Enterprise Linux (RHEL) 6 kernel package versions prior to 2.6.32-358.11.1.el6

Description The issue is related to a problem in the do filp open function in fs/namei.c, where failure to obtain write permissions is not handled properly. This can be exploited by local users to cause a denial of service, resulting in a system crash, by accessing a filesystem that is mounted read-only.

Recommendations For Red Hat Enterprise Linux (RHEL) 6 kernel package versions prior to 2.6.32-358.11.1.el6, update to version 2.6.32-358.11.1.el6 or later to resolve the issue.

Fix

DoS

Weakness Enumeration

CWE-264

Related Identifiers

CESA-2013_0911

CVE-2013-2188

RHSA-2013:0911

RHSA-2013_0911

Affected Products

Centos

Red Hat

References · 16

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2188 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1935 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2017 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2013-2188 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1943 · Security Note
• https://bugzilla.redhat.com/show_bug.cgi?id=975406 · Note
• https://access.redhat.com/security/cve/CVE-2013-1935 · Note
• https://lists.centos.org/pipermail/centos-announce/2013-June/081946.html · Note
• https://lists.centos.org/pipermail/centos-announce/2013-June/031822.html · Note
• https://access.redhat.com/security/cve/CVE-2013-2188 · Note
• https://lists.centos.org/pipermail/centos-announce/2013-June/056703.html · Note
• https://access.redhat.com/errata/RHSA-2013:0911 · Note
• https://rhn.redhat.com/errata/RHSA-2013-0911.html · Note
• https://lists.centos.org/pipermail/centos-announce/2013-June/069259.html · Note
• https://access.redhat.com/security/cve/CVE-2013-1943 · Note