Linux Kernel '__nfs4_get_acl_uncached()' Function Local Buffer Overflow Vulnerability
BID:63791
Info
Linux Kernel '__nfs4_get_acl_uncached()' Function Local Buffer Overflow Vulnerability
| Bugtraq ID: | 63791 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2013-4591 |
| Remote: | No |
| Local: | Yes |
| Published: | Nov 18 2013 12:00AM |
| Updated: | Mar 17 2014 01:13AM |
| Credit: | Sachin Prabhu |
| Vulnerable: |
Red Hat Enterprise Linux Workstation Optional 6 Red Hat Enterprise Linux Workstation 6 Red Hat Enterprise Linux Server Optional 6 Red Hat Enterprise Linux Server 6 Red Hat Enterprise Linux HPC Node Optional 6 Red Hat Enterprise Linux HPC Node 6 Red Hat Enterprise Linux Desktop Optional 6 Red Hat Enterprise Linux Desktop 6 Oracle Enterprise Linux 5 Linux kernel 3.3.5 Linux kernel 3.3.4 Linux kernel 3.3.2 Linux kernel 3.2.13 Linux kernel 3.2.9 Linux kernel 3.2.1 Linux kernel 3.1.8 Linux kernel 3.0.5 Linux kernel 3.0.4 Linux kernel 3.0.2 Linux kernel 3.0.1 Linux kernel 3.2.2 Linux kernel 3.0.18 Linux kernel 3.0 Avaya Aura Experience Portal 6.0 |
| Not Vulnerable: | |
Discussion
Linux Kernel '__nfs4_get_acl_uncached()' Function Local Buffer Overflow Vulnerability
The Linux kernel is prone to a local buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data.
Attackers can exploit this issue to execute arbitrary code with kernel privileges. Failed exploit attempts will likely crash the kernel, denying service to legitimate users.
The Linux kernel is prone to a local buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data.
Attackers can exploit this issue to execute arbitrary code with kernel privileges. Failed exploit attempts will likely crash the kernel, denying service to legitimate users.
Exploit / POC
Linux Kernel '__nfs4_get_acl_uncached()' Function Local Buffer Overflow Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Linux Kernel '__nfs4_get_acl_uncached()' Function Local Buffer Overflow Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Linux Kernel '__nfs4_get_acl_uncached()' Function Local Buffer Overflow Vulnerability
References:
References:
- Linux Homepage (Linux)