PT-2013-3607 · Linux+2 · Linux Kernel+2

Prasad Pandit · Published 2013-07-04 · Updated 2023-02-13 · CVE-2013-2224

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Red Hat Enterprise Linux (RHEL) 6 with Linux kernel 2.6.32

Description The issue allows local users to cause a denial of service, resulting in an invalid free operation and system crash, or possibly gain privileges. This is achieved via a sendmsg system call with the IP RETOPTS option.

Recommendations For Red Hat Enterprise Linux (RHEL) 6 with Linux kernel 2.6.32, consider applying the correct patch to resolve the issue, as the existing patch is incorrect and introduces this problem.

Fix

Related Identifiers

CESA-2013_1173

CVE-2013-2224

RHSA-2013:1166

RHSA-2013:1173

RHSA-2013:1195

RHSA-2013:1450

RHSA-2013_1166

RHSA-2013_1173

Affected Products

Centos

Linux Kernel

Red Hat

References · 42

• https://bdu.fstec.ru/vul/2014-00086 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2224 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2146 · Security Note
• https://bdu.fstec.ru/vul/2014-00077 · Security Note
• http://rhn.redhat.com/errata/RHSA-2013-1173.html · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2013-1450.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2237 · Security Note
• http://rhn.redhat.com/errata/RHSA-2013-1166.html · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2013-1173.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2206 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2232 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6544 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2013-2224 · Security Note
• https://github.com/torvalds/linux/commit/a5cc68f3d63306d0d288f31edfc2ae6ef8ecd887 · Note
• https://github.com/torvalds/linux/commit/a963a37d384d71ad43b3e9e79d68d42fbe0901f3 · Note