PT-2013-5053 · Linux+2 · Linux Kernel+2

Fabian Yamaguchi + 1 · Published 2013-11-12 · Updated 2023-02-13 · CVE-2013-4514

Positive Technologies (AI Summary)

CVSS v2.0

4.7

Medium

Base vector

AV:L/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.12

Description The issue is related to multiple buffer overflows in the Linux kernel, specifically in the drivers/staging/wlags49 h2/wl priv.c file. This can be exploited by local users with the CAP NET ADMIN capability to cause a denial of service or possibly have other unspecified impacts. The exploitation is related to the wvlan uil put info and wvlan set station nickname functions when a long station-name string is provided.

Recommendations For Linux kernel versions prior to 3.12, update to version 3.12 or later to resolve the issue. As a temporary workaround, consider restricting the CAP NET ADMIN capability to minimize the risk of exploitation. Additionally, avoid providing long station-name strings to prevent triggering the buffer overflows in the wvlan uil put info and wvlan set station nickname functions until the issue is resolved.

Exploit

Fix

DoS

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

ALT-PU-2013-1133

ALT-PU-2014-1422

CVE-2013-4514

OPENSUSE-SU-2014_0204-1

SUSE-RU-2015:0621-1

SUSE-SU-2015:0481-1

SUSE-SU-2015:0581-1

SUSE-SU-2015:0736-1

SUSE-SU-2015:1174-1

SUSE-SU-2015:1376-1

USN-2066-1

USN-2067-1

USN-2068-1

USN-2069-1

USN-2070-1

USN-2071-1

USN-2072-1

USN-2073-1

USN-2074-1

USN-2075-1

USN-2076-1

Affected Products

Alt Linux

Linux Kernel

Suse

References · 238

• 🔥 https://github.com/torvalds/linux/commit/b5e2f339865fb443107e5b10603e53bbc92dc054 · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/recvmmsg_priv_esc.rb · Exploit
• 🔥 https://github.com/saelo/cve-2014-0038 · Exploit
• 🔥 https://github.com/luan0ap/cve-2018-14634 · Exploit
• 🔥 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=b5e2f339865fb443107e5b10603e53bbc92dc054 · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2892 · Security Note
• http://ubuntu.com/usn/USN-2074-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8173 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9870 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2896 · Security Note
• https://bdu.fstec.ru/vul/2016-02003 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3645 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2888 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2929 · Security Note
• https://kernel.org/pub/linux/kernel/v3.x/patch-3.12.bz2 · Patch