Linux Kernel CVE-2013-2891 Heap Buffer Overflow Vulnerability
BID:62047
Info
Linux Kernel CVE-2013-2891 Heap Buffer Overflow Vulnerability
| Bugtraq ID: | 62047 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2013-2891 |
| Remote: | No |
| Local: | Yes |
| Published: | Aug 28 2013 12:00AM |
| Updated: | Apr 13 2015 09:47PM |
| Credit: | Kees Cook of Chrome OS Security |
| Vulnerable: |
S.u.S.E. openSUSE 13.1 S.u.S.E. openSUSE 12.3 Linux kernel 3.10.9 Linux kernel 3.10.7 Linux kernel 3.8.9 Linux kernel 3.8.6 Linux kernel 3.8.5 Linux kernel 3.8.4 Linux kernel 3.8.2 Linux kernel 3.8.1 Linux kernel 3.7.10 Linux kernel 3.7.9 Linux kernel 3.7.8 Linux kernel 3.7.7 Linux kernel 3.7.5 Linux kernel 3.7.4 Linux kernel 3.7.3 Linux kernel 3.7.2 Linux kernel 3.7.1 Linux kernel 3.6.11 Linux kernel 3.6.10 Linux kernel 3.6.9 Linux kernel 3.6.8 Linux kernel 3.6.7 Linux kernel 3.6.6 Linux kernel 3.6.5 Linux kernel 3.6.4 Linux kernel 3.6.3 Linux kernel 3.6.2 Linux kernel 3.6.1 Linux kernel 3.5.7 Linux kernel 3.5.6 Linux kernel 3.5.5 Linux kernel 3.5.4 Linux kernel 3.5.3 Linux kernel 3.5.2 Linux kernel 3.5.1 Linux kernel 3.4.58 Linux kernel 3.4.42 Linux kernel 3.4.36 Linux kernel 3.4.32 Linux kernel 3.4.31 Linux kernel 3.4.27 Linux kernel 3.4.26 Linux kernel 3.4.25 Linux kernel 3.4.21 Linux kernel 3.4.20 Linux kernel 3.4.19 Linux kernel 3.4.18 Linux kernel 3.4.17 Linux kernel 3.4.16 Linux kernel 3.4.15 Linux kernel 3.4.14 Linux kernel 3.4.13 Linux kernel 3.4.12 Linux kernel 3.4.11 Linux kernel 3.4.10 Linux kernel 3.4.9 Linux kernel 3.4.8 Linux kernel 3.4.7 Linux kernel 3.4.6 Linux kernel 3.4.5 Linux kernel 3.4.4 Linux kernel 3.4.3 Linux kernel 3.4.2 Linux kernel 3.4.1 Linux kernel 3.3.5 Linux kernel 3.3.4 Linux kernel 3.3.2 Linux kernel 3.2.23 Linux kernel 3.2.13 Linux kernel 3.2.12 Linux kernel 3.2.9 Linux kernel 3.2.1 Linux kernel 3.1.8 Linux kernel 3.0.75 Linux kernel 3.0.72 Linux kernel 3.0.69 Linux kernel 3.0.65 Linux kernel 3.0.60 Linux kernel 3.0.59 Linux kernel 3.0.58 Linux kernel 3.0.37 Linux kernel 3.0.34 Linux kernel 3.0.5 Linux kernel 3.0.4 Linux kernel 3.0.2 Linux kernel 3.0.1 Linux kernel 2.6.39 Linux kernel 2.6.38 Linux kernel 2.6.37 Linux kernel 2.6.36 Linux kernel 2.6.35 Linux kernel 2.6.34 Linux kernel 2.6.33 Linux kernel 2.6.32 Linux kernel 2.6.31 Linux kernel 2.6.30 Linux kernel 2.6.29 Linux kernel 2.6.28 Linux kernel 2.6.19 Linux kernel 2.6.17 Linux kernel 2.6.16 Linux kernel 2.6.15 Linux kernel 2.6.14 Linux kernel 2.6.13 Linux kernel 2.6.12 Linux kernel 2.6.11 Linux kernel 2.6.10 Linux kernel 2.6.9 rc4 Linux kernel 2.6.9 rc3 Linux kernel 2.6.9 rc2 Linux kernel 2.6.9 rc1 Linux kernel 2.6.9 Linux kernel 2.6.8 rc4 Linux kernel 2.6.8 rc3 Linux kernel 2.6.8 rc2 Linux kernel 2.6.8 rc1 Linux kernel 2.6.8 Linux kernel 2.6.7 Linux kernel 2.6.6 rc1 Linux kernel 2.6.6 Linux kernel 2.6.5 Linux kernel 2.6.4 Linux kernel 2.6.3 Linux kernel 2.6.1 Linux kernel 2.6 Linux kernel 3.9.8 Linux kernel 3.9.4 Linux kernel 3.9-rc8 Linux kernel 3.9-rc7 Linux kernel 3.9-rc3 Linux kernel 3.9 Linux kernel 3.8-rc1 Linux kernel 3.8 Linux kernel 3.7.6 Linux kernel 3.7-rc1 Linux kernel 3.7 Linux kernel 3.6 Linux kernel 3.4.29 Linux kernel 3.3 Linux kernel 3.2.50 Linux kernel 3.2.44 Linux kernel 3.2.42 Linux kernel 3.2.38 Linux kernel 3.2.2 Linux kernel 3.2 Linux kernel 3.11-rc7 Linux kernel 3.11-rc4 Linux kernel 3.11-rc1 Linux kernel 3.10.5 Linux kernel 3.10 Linux kernel 3.1 Linux kernel 3.0.66 Linux kernel 3.0.62 Linux kernel 3.0.18 Linux kernel 3.0-rc4-git1 Linux kernel 3.0-rc1 Linux kernel 3.0 Linux kernel 2.6.8.1 Linux kernel 2.6.38.6 Linux kernel 2.6.38.4 Linux kernel 2.6.38.3 Linux kernel 2.6.38.2 Linux kernel 2.6.35.5 Linux kernel 2.6.35.4 Linux kernel 2.6.35.1 Linux kernel 2.6.34.2 Linux kernel 2.6.34.13 Linux kernel 2.6.33.7 Linux kernel 2.6.32.8 Linux kernel 2.6.32.7 Linux kernel 2.6.32.4 Linux kernel 2.6.32.3 Linux kernel 2.6.32.28 Linux kernel 2.6.32.22 Linux kernel 2.6.32.17 Linux kernel 2.6.32.12 Linux kernel 2.6.32.11 Linux kernel 2.6.31.6 Linux kernel 2.6.31.4 Linux kernel 2.6.31.1 Linux kernel 2.6.30.5 Linux kernel 2.6.30.4 Linux kernel 2.6.30.3 Linux kernel 2.6.28.4 Linux kernel 2.6.28.10 Linux kernel 2.6.25.4 Linux kernel 2.6.25.3 Linux kernel 2.6.25.2 Linux kernel 2.6.25.1 Linux kernel 2.6.24.6 Linux kernel 2.6.24.4 Linux kernel 2.6.24.3 Linux kernel 2.6.23.14 Linux kernel 2.6.23.10 Linux kernel 2.6.23.1 Linux kernel 2.6.18 |
| Not Vulnerable: | |
Discussion
Linux Kernel CVE-2013-2891 Heap Buffer Overflow Vulnerability
The Linux kernel is prone to a heap-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data.
Attackers can exploit this issue to execute arbitrary code with kernel privileges. Failed exploit attempts will likely crash the kernel, denying service to legitimate users.
The Linux kernel is prone to a heap-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data.
Attackers can exploit this issue to execute arbitrary code with kernel privileges. Failed exploit attempts will likely crash the kernel, denying service to legitimate users.
Solution / Fix
Linux Kernel CVE-2013-2891 Heap Buffer Overflow Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Linux Kernel CVE-2013-2891 Heap Buffer Overflow Vulnerability
References:
References:
- [PATCH 05/14] HID: steelseries: validate output report details (Kees Cook)
- Linux HID security flaws (Kees Cook)
- Linux Homepage (Linux)