Linux Kernel CVE-2013-4511 Multiple Integer Overflow Vulnerabilities
BID:63512
Info
Linux Kernel CVE-2013-4511 Multiple Integer Overflow Vulnerabilities
| Bugtraq ID: | 63512 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2013-4511 |
| Remote: | No |
| Local: | Yes |
| Published: | Oct 29 2013 12:00AM |
| Updated: | Feb 27 2014 01:03PM |
| Credit: | Fabian Yamaguchi and Nico Golde |
| Vulnerable: |
Ubuntu Ubuntu Linux 12.04 LTS i386 Ubuntu Ubuntu Linux 12.04 LTS amd64 Ubuntu Ubuntu Linux 10.04 sparc Ubuntu Ubuntu Linux 10.04 powerpc Ubuntu Ubuntu Linux 10.04 i386 Ubuntu Ubuntu Linux 10.04 ARM Ubuntu Ubuntu Linux 10.04 amd64 SuSE openSUSE 11.4 Linux kernel 3.3.5 Linux kernel 3.3.4 Linux kernel 3.3.2 Linux kernel 3.2.13 Linux kernel 3.2.9 Linux kernel 3.2.1 Linux kernel 3.1.8 Linux kernel 3.0.5 Linux kernel 3.0.4 Linux kernel 3.0.2 Linux kernel 3.0.1 Linux kernel 2.6.39 Linux kernel 2.6.38 Linux kernel 2.6.37 Linux kernel 2.6.36 Linux kernel 2.6.33 Linux kernel 2.6.32 Linux kernel 2.6.31 Linux kernel 2.6.30 Linux kernel 2.6.29 Linux kernel 2.6.28 Linux kernel 2.6.19 Linux kernel 2.6.17 Linux kernel 2.6.16 Linux kernel 2.6.15 Linux kernel 2.6.14 Linux kernel 2.6.13 Linux kernel 2.6.12 Linux kernel 2.6.11 Linux kernel 2.6.10 Linux kernel 2.6.9 rc4 Linux kernel 2.6.9 rc3 Linux kernel 2.6.9 rc2 Linux kernel 2.6.9 rc1 Linux kernel 2.6.9 Linux kernel 2.6.8 rc4 Linux kernel 2.6.8 rc3 Linux kernel 2.6.8 rc2 Linux kernel 2.6.8 Linux kernel 2.6.6 Linux kernel 2.6.4 Linux kernel 2.6.3 Linux kernel 2.6.1 Linux kernel 2.6 Linux kernel 3.2.2 Linux kernel 3.0.18 Linux kernel 3.0-rc1 Linux kernel 3.0 Linux kernel 2.6.38.6 Linux kernel 2.6.38.4 Linux kernel 2.6.38.3 Linux kernel 2.6.38.2 Linux kernel 2.6.35.5 Linux kernel 2.6.35.4 Linux kernel 2.6.34.2 Linux kernel 2.6.33.7 Linux kernel 2.6.32.8 Linux kernel 2.6.32.7 Linux kernel 2.6.32.4 Linux kernel 2.6.32.3 Linux kernel 2.6.32.28 Linux kernel 2.6.32.22 Linux kernel 2.6.32.17 Linux kernel 2.6.32.12 Linux kernel 2.6.32.11 Linux kernel 2.6.31.6 Linux kernel 2.6.31.4 Linux kernel 2.6.31.1 Linux kernel 2.6.30.5 Linux kernel 2.6.30.4 Linux kernel 2.6.30.3 Linux kernel 2.6.28.4 Linux kernel 2.6.28.10 Linux kernel 2.6.25.4 Linux kernel 2.6.25.3 Linux kernel 2.6.25.2 Linux kernel 2.6.25.1 Linux kernel 2.6.24.6 Linux kernel 2.6.24.4 Linux kernel 2.6.24.3 Linux kernel 2.6.23.14 Linux kernel 2.6.23.10 Linux kernel 2.6.23.1 Linux kernel 2.6.18 |
| Not Vulnerable: | |
Discussion
Linux Kernel CVE-2013-4511 Multiple Integer Overflow Vulnerabilities
The Linux kernel is prone to multiple integer-overflow vulnerabilities because it fails to perform adequate boundary checks on user-supplied data.
Attackers can exploit these issues to execute arbitrary code with kernel privileges. Failed exploit attempts will likely crash the kernel, denying service to legitimate users.
NOTE: The issue described by CVE-2013-6763 has been moved to BID 63707 (Linux Kernel CVE-2013-6763 Integer Overflow Vulnerability) to better document it.
The Linux kernel is prone to multiple integer-overflow vulnerabilities because it fails to perform adequate boundary checks on user-supplied data.
Attackers can exploit these issues to execute arbitrary code with kernel privileges. Failed exploit attempts will likely crash the kernel, denying service to legitimate users.
NOTE: The issue described by CVE-2013-6763 has been moved to BID 63707 (Linux Kernel CVE-2013-6763 Integer Overflow Vulnerability) to better document it.
Exploit / POC
Linux Kernel CVE-2013-4511 Multiple Integer Overflow Vulnerabilities
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Linux Kernel CVE-2013-4511 Multiple Integer Overflow Vulnerabilities
Solution:
Updates are available. Please see the references for more information.
Solution:
Updates are available. Please see the references for more information.
References
Linux Kernel CVE-2013-4511 Multiple Integer Overflow Vulnerabilities
References:
References:
- Linux Homepage (Linux)