PT-2013-3972 · Linux+4 · Linux Kernel+4

Kees Cook · Published 2013-06-07 · Updated 2014-03-26 · CVE-2013-2851

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Medium

Base vector

AV:L/AC:H/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.9.4

Description The issue allows local users to gain privileges by leveraging root access and writing format string specifiers to /sys/module/md mod/parameters/new array in order to create a crafted /dev/md device name. This is due to a format string vulnerability in the register disk function in block/genhd.c.

Recommendations For Linux kernel versions prior to 3.9.4, update to version 3.9.4 or later to resolve the issue. As a temporary workaround, consider restricting access to the /sys/module/md mod/parameters/new array file to minimize the risk of exploitation.

Fix

Use of Externally-Controlled Format String

Weakness Enumeration

CWE-134

Related Identifiers

ALT-PU-2013-1178

CESA-2013_1645

CVE-2013-2851

DSA-2745-1

DSA-2766-1

MGASA-2013-0371

MGASA-2013-0372

MGASA-2013-0373

MGASA-2013-0374

MGASA-2013-0375

RHSA-2013:1264

RHSA-2013:1645

RHSA-2013:1783

RHSA-2013_1645

RHSA-2014:0284

SUSE-RU-2015:0621-1

SUSE-SU-2015:0481-1

SUSE-SU-2015:0581-1

SUSE-SU-2015:0652-1

SUSE-SU-2015:0736-1

SUSE-SU-2015:1174-1

SUSE-SU-2015:1376-1

USN-1912-1

USN-1913-1

USN-1931-1

USN-1932-1

USN-1933-1

USN-1934-1

USN-1935-1

USN-1936-1

USN-1941-1

USN-1942-1

Affected Products

Alt Linux

Centos

Linux Kernel

Red Hat

Suse

References · 177

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2892 · Security Note
• https://ubuntu.com/security/CVE-2013-2851 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2013-0374.html · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2013-2851 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2013-2851 · Security Note
• https://bdu.fstec.ru/vul/2014-00079 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2888 · Security Note
• https://linux.oracle.com/errata/ELSA-2013-2543.html · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2013-2542.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1929 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0228 · Security Note
• https://bdu.fstec.ru/vul/2014-00078 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4345 · Security Note
• https://bdu.fstec.ru/vul/2015-05314 · Security Note
• https://ubuntu.com/security/notices/USN-1936-1 · Vendor Advisory