PT-2013-6020 · Linux+4 · Linux Kernel+4

Fabian Yamaguchi + 1 · Published 2013-11-26 · Updated 2023-02-13 · CVE-2013-6378

Positive Technologies (AI Summary)

CVSS v2.0

4.4

Medium

Base vector

AV:L/AC:M/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.12.1

Description The issue allows local users to cause a denial of service by leveraging root privileges for a zero-length write operation in the lbs debugfs write function.

Recommendations For versions prior to 3.12.1, update to version 3.12.1 or later to resolve the issue.

Exploit

Fix

DoS

Weakness Enumeration

CWE-189

Related Identifiers

ALT-PU-2013-1236

ALT-PU-2014-1422

ALT-PU-2014-1547

ALT-PU-2014-1802

CESA-2014_0771

CVE-2013-6378

DSA-2906-1

MGASA-2013-0371

MGASA-2013-0372

MGASA-2013-0373

MGASA-2013-0374

MGASA-2013-0375

OPENSUSE-SU-2014_0204-1

RHSA-2014:0100

RHSA-2014:0771

RHSA-2014_0771

SUSE-RU-2015:0621-1

SUSE-SU-2015:0481-1

SUSE-SU-2015:0581-1

SUSE-SU-2015:0652-1

SUSE-SU-2015:0736-1

SUSE-SU-2015:1174-1

SUSE-SU-2015:1376-1

USN-2064-1

USN-2065-1

USN-2066-1

USN-2067-1

USN-2070-1

USN-2075-1

USN-2111-1

USN-2112-1

USN-2114-1

USN-2115-1

USN-2116-1

Affected Products

Alt Linux

Centos

Linux Kernel

Red Hat

Suse

References · 98

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/recvmmsg_priv_esc.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/android/local/futex_requeue.rb · Exploit
• 🔥 https://github.com/saelo/cve-2014-0038 · Exploit
• 🔥 https://github.com/timwr/CVE-2014-3153 · Exploit
• 🔥 https://github.com/android-rooting-tools/libfutex_exploit · Exploit
• 🔥 https://github.com/lieanu/CVE-2014-3153 · Exploit
• 🔥 https://github.com/luan0ap/cve-2018-14634 · Exploit
• 🔥 https://github.com/elongl/CVE-2014-3153 · Exploit
• 🔥 https://github.com/zerodavinci/CVE-2014-3153-exploit · Exploit
• 🔥 https://github.com/tempbottle/CVE-2014-0196 · Exploit
• https://ubuntu.com/security/CVE-2013-6378 · Vendor Advisory
• http://ubuntu.com/usn/USN-2116-1 · Vendor Advisory
• http://ubuntu.com/usn/USN-2064-1 · Vendor Advisory
• http://ubuntu.com/usn/USN-2114-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-2067-1 · Vendor Advisory