PT-2013-5051 · Linux+2 · Linux Kernel+2

Fabian Yamaguchi + 1 · Published 2013-11-07 · Updated 2023-12-15 · CVE-2013-4511

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.12

Description The issue is related to multiple integer overflows in Alchemy LCD frame-buffer drivers. Local users can create a read-write memory mapping for the entirety of kernel memory and gain privileges via crafted mmap operations. This is related to the au1100fb fb mmap function in drivers/video/au1100fb.c and the au1200fb fb mmap function in drivers/video/au1200fb.c.

Recommendations For Linux kernel versions prior to 3.12, update to version 3.12 or later to resolve the issue. As a temporary workaround, consider restricting access to the au1100fb fb mmap and au1200fb fb mmap functions until a patch is available.

Exploit

Fix

Weakness Enumeration

CWE-189

Related Identifiers

ALT-PU-2013-1060

ALT-PU-2013-1061

ALT-PU-2013-1133

ALT-PU-2014-1422

CVE-2013-4511

DSA-2906-1

OPENSUSE-SU-2014_0204-1

OPENSUSE-SU-2014_0205-1

SUSE-RU-2015:0621-1

SUSE-SU-2015:0481-1

SUSE-SU-2015:0581-1

SUSE-SU-2015:0652-1

SUSE-SU-2015:0736-1

SUSE-SU-2015:1174-1

SUSE-SU-2015:1376-1

USN-2036-1

USN-2037-1

USN-2066-1

USN-2067-1

USN-2068-1

USN-2069-1

USN-2070-1

USN-2071-1

USN-2072-1

USN-2073-1

USN-2074-1

USN-2075-1

USN-2076-1

Affected Products

Alt Linux

Linux Kernel

Suse

References · 264

• 🔥 https://github.com/torvalds/linux/commit/7314e613d5ff9f0934f7a0f74ed7973b903315d1 · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/recvmmsg_priv_esc.rb · Exploit
• 🔥 https://github.com/saelo/cve-2014-0038 · Exploit
• 🔥 https://github.com/luan0ap/cve-2018-14634 · Exploit
• 🔥 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=7314e613d5ff9f0934f7a0f74ed7973b903315d1 · Exploit
• http://ubuntu.com/usn/USN-2074-1 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00003.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8173 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9870 · Security Note
• http://ubuntu.com/usn/USN-2036-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2016-02003 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2888 · Security Note
• https://kernel.org/pub/linux/kernel/v3.x/patch-3.12.bz2 · Patch
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2929 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4299 · Security Note