PT-2013-6247 · Linux+2 · Linux Kernel+2

Evan Huus · Published 2013-11-05 · Updated 2014-04-02 · CVE-2013-7027

Positive Technologies (AI Summary)

CVSS v2.0

6.1

Medium

Base vector

AV:A/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.11.7

Description The issue is related to the ieee80211 radiotap iterator init function in the Linux kernel, which does not properly check for data outside of the header in a frame. This could potentially allow attackers to cause a denial of service through a buffer over-read by crafting a malicious header.

Recommendations For versions prior to 3.11.7, update to version 3.11.7 or later to resolve the issue.

Exploit

Fix

DoS

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

ALT-PU-2013-1053

ALT-PU-2014-1422

CVE-2013-7027

OPENSUSE-SU-2014_0204-1

SUSE-RU-2015:0621-1

SUSE-SU-2015:0481-1

SUSE-SU-2015:0581-1

SUSE-SU-2015:0652-1

SUSE-SU-2015:0736-1

SUSE-SU-2015:1174-1

SUSE-SU-2015:1376-1

USN-2042-1

USN-2049-1

USN-2066-1

USN-2067-1

USN-2068-1

USN-2069-1

USN-2071-1

USN-2072-1

USN-2073-1

USN-2074-1

USN-2076-1

USN-2128-1

USN-2129-1

Affected Products

Alt Linux

Linux Kernel

Suse

References · 243

• 🔥 https://github.com/torvalds/linux/commit/f5563318ff1bde15b10e736e97ffce13be08bc1a · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/recvmmsg_priv_esc.rb · Exploit
• 🔥 https://github.com/saelo/cve-2014-0038 · Exploit
• 🔥 https://github.com/luan0ap/cve-2018-14634 · Exploit
• 🔥 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=f5563318ff1bde15b10e736e97ffce13be08bc1a · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2892 · Security Note
• http://ubuntu.com/usn/USN-2074-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2013-7027 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8173 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9870 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2896 · Security Note
• https://bdu.fstec.ru/vul/2016-02003 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3645 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2888 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2929 · Security Note