PT-2013-6316 · Linux+4 · Linux Kernel+4
Published
1970-01-01
·
Updated
2019-04-22
·
CVE-2013-4299
CVSS v2.0
6.0
Medium
| Vector | AV:N/AC:M/Au:S/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions through 3.11.6
Description
The issue is related to an interpretation conflict in the Linux kernel, specifically in the drivers/md/dm-snap-persistent.c file. This conflict allows remote authenticated users to obtain sensitive information or modify data via a crafted mapping to a snapshot block device. The vulnerability can be exploited remotely and may lead to a breach of confidentiality, integrity, and availability of protected information. Additionally, local users may gain access to sensitive kernel memory due to an error in the device-mapper subsystem.
Recommendations
For Linux kernel versions through 3.11.6, update to a version later than 3.11.6 to resolve the issue.
At the moment, there is no information about a newer version that contains a fix for this vulnerability for other affected packages.
Exploit
Fix
Information Disclosure
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Centos
Linux Kernel
Red Hat
Suse