Linux Kernel 'exitcode_proc_write()' Function Local Buffer Overflow Vulnerability
BID:63510
Info
Linux Kernel 'exitcode_proc_write()' Function Local Buffer Overflow Vulnerability
| Bugtraq ID: | 63510 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2013-4512 |
| Remote: | No |
| Local: | Yes |
| Published: | Nov 04 2013 12:00AM |
| Updated: | Apr 25 2014 11:01AM |
| Credit: | Fabian Yamaguchi, Nico Golde |
| Vulnerable: |
Linux kernel 3.3.5 Linux kernel 3.3.4 Linux kernel 3.3.2 Linux kernel 3.2.13 Linux kernel 3.2.9 Linux kernel 3.2.1 Linux kernel 3.1.8 Linux kernel 3.0.5 Linux kernel 3.0.4 Linux kernel 3.0.2 Linux kernel 3.0.1 Linux kernel 2.6.39 Linux kernel 2.6.38 Linux kernel 2.6.37 Linux kernel 2.6.36 Linux kernel 2.6.33 Linux kernel 2.6.32 Linux kernel 2.6.31 Linux kernel 2.6.30 Linux kernel 2.6.29 Linux kernel 2.6.28 Linux kernel 2.6.19 Linux kernel 2.6.17 Linux kernel 2.6.16 Linux kernel 2.6.15 Linux kernel 2.6.14 Linux kernel 2.6.13 Linux kernel 2.6.12 Linux kernel 2.6.11 Linux kernel 2.6.10 Linux kernel 2.6.9 rc4 Linux kernel 2.6.9 rc3 Linux kernel 2.6.9 rc2 Linux kernel 2.6.9 rc1 Linux kernel 2.6.9 Linux kernel 2.6.8 rc4 Linux kernel 2.6.8 rc3 Linux kernel 2.6.8 rc2 Linux kernel 2.6.8 Linux kernel 2.6.6 Linux kernel 2.6.4 Linux kernel 2.6.3 Linux kernel 2.6.1 Linux kernel 2.6 Linux kernel 3.2.2 Linux kernel 3.0.18 Linux kernel 3.0-rc1 Linux kernel 3.0 Linux kernel 2.6.38.6 Linux kernel 2.6.38.4 Linux kernel 2.6.38.3 Linux kernel 2.6.38.2 Linux kernel 2.6.35.5 Linux kernel 2.6.35.4 Linux kernel 2.6.34.2 Linux kernel 2.6.33.7 Linux kernel 2.6.32.8 Linux kernel 2.6.32.7 Linux kernel 2.6.32.4 Linux kernel 2.6.32.3 Linux kernel 2.6.32.28 Linux kernel 2.6.32.22 Linux kernel 2.6.32.17 Linux kernel 2.6.32.12 Linux kernel 2.6.32.11 Linux kernel 2.6.31.6 Linux kernel 2.6.31.4 Linux kernel 2.6.31.1 Linux kernel 2.6.30.5 Linux kernel 2.6.30.4 Linux kernel 2.6.30.3 Linux kernel 2.6.28.4 Linux kernel 2.6.28.10 Linux kernel 2.6.25.4 Linux kernel 2.6.25.3 Linux kernel 2.6.25.2 Linux kernel 2.6.25.1 Linux kernel 2.6.24.6 Linux kernel 2.6.24.4 Linux kernel 2.6.24.3 Linux kernel 2.6.23.14 Linux kernel 2.6.23.10 Linux kernel 2.6.23.1 Linux kernel 2.6.18 Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64 |
| Not Vulnerable: | |
Discussion
Linux Kernel 'exitcode_proc_write()' Function Local Buffer Overflow Vulnerability
The Linux kernel is prone to a local buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data.
Attackers can exploit this issue to execute arbitrary code with kernel privileges. Failed exploit attempts will likely crash the kernel, denying service to legitimate users.
The Linux kernel is prone to a local buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data.
Attackers can exploit this issue to execute arbitrary code with kernel privileges. Failed exploit attempts will likely crash the kernel, denying service to legitimate users.
Exploit / POC
Linux Kernel 'exitcode_proc_write()' Function Local Buffer Overflow Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Linux Kernel 'exitcode_proc_write()' Function Local Buffer Overflow Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Linux Kernel 'exitcode_proc_write()' Function Local Buffer Overflow Vulnerability
References:
References:
- Linux Homepage (Linux)