Linux Kernel CVE-2013-6368 Local Privilege Escalation Vulnerability
BID:64291
Info
Linux Kernel CVE-2013-6368 Local Privilege Escalation Vulnerability
| Bugtraq ID: | 64291 |
| Class: | Unknown |
| CVE: |
CVE-2013-6368 |
| Remote: | No |
| Local: | Yes |
| Published: | Dec 12 2013 12:00AM |
| Updated: | Apr 13 2015 09:23PM |
| Credit: | Andrew Honig of Google |
| Vulnerable: |
Ubuntu Ubuntu Linux 13.10 Ubuntu Ubuntu Linux 12.10 i386 Ubuntu Ubuntu Linux 12.10 amd64 Ubuntu Ubuntu Linux 12.04 LTS i386 Ubuntu Ubuntu Linux 12.04 LTS amd64 SuSE SUSE Linux Enterprise Server for VMware 11 SP3 SuSE SUSE Linux Enterprise Server 11 SP3 SuSE SUSE Linux Enterprise High Availability Extension 11 SP3 SuSE Suse Linux Enterprise Desktop 11 SP3 SuSE Linux Enterprise Server 11 SP1 LTSS SuSE Linux Enterprise Real Time Extension 11 SP3 S.u.S.E. openSUSE 13.1 S.u.S.E. openSUSE 12.3 S.u.S.E. openSUSE 11.4 Redhat Enterprise Linux Workstation 6 Redhat Enterprise Linux Virtualization 5 Server Redhat Enterprise Linux Server EUS 6.5.z Redhat Enterprise Linux Server EUS 6.4.z Redhat Enterprise Linux Server EUS 6.0 Redhat Enterprise Linux Server AUS 6.4 Redhat Enterprise Linux Server 6 Redhat Enterprise Linux Resilient Storage EUS 6.5.z Redhat Enterprise Linux HPC Node 6 Redhat Enterprise Linux Desktop Multi OS 5 client Redhat Enterprise Linux Desktop 6 Oracle Enterprise Linux 6.2 Oracle Enterprise Linux 6 Oracle Enterprise Linux 5 Mandriva Business Server 1 X86 64 Mandriva Business Server 1 Linux Linux Kernel 3.11.3 Linux Linux Kernel 3.11.1 Linux Linux Kernel 3.10.7 Linux Linux Kernel 3.10.3 Linux Linux Kernel 3.10.2 Linux Linux Kernel 3.8.11 Linux Linux Kernel 3.8.6 Linux Linux Kernel 3.7.10 Linux Linux Kernel 3.4.28 Linux Linux Kernel 3.4.27 Linux Linux Kernel 3.4.19 Linux Linux Kernel 3.4.15 Linux Linux Kernel 3.4.14 Linux Linux Kernel 3.4.13 Linux Linux Kernel 3.4.11 Linux Linux Kernel 3.3.8 Linux Linux Kernel 3.2.30 Linux Linux Kernel 3.2.27 Linux Linux Kernel 3.2.26 Linux Linux Kernel 3.2.18 Linux Linux Kernel 3.2.17 Linux Linux Kernel 3.1.4 Linux Linux Kernel 3.0.61 Linux Linux Kernel 3.0.41 Linux Linux Kernel 3.0.35 Linux Linux Kernel 3.0.33 Linux Linux Kernel 3.0.32 Linux Linux Kernel 3.0.24 Linux Linux Kernel 3.0.23 Linux Linux Kernel 3.9 Rc6 Linux Linux Kernel 3.9 Rc5 Linux Linux Kernel 3.9 Rc4 Linux Linux Kernel 3.8.5 Linux Linux Kernel 3.8.3 Linux Linux Kernel 3.8.1 Linux Linux Kernel 3.7.9 Linux Linux Kernel 3.7.2 Linux Linux Kernel 3.7 Linux Linux Kernel 3.6.9 Linux Linux Kernel 3.6.7 Linux Linux Kernel 3.6.10 Linux Linux Kernel 3.6 Linux Linux Kernel 3.5.7 Linux Linux Kernel 3.5.6 Linux Linux Kernel 3.5.2 Linux Linux Kernel 3.4.9 Linux Linux Kernel 3.4.8 Linux Linux Kernel 3.4.4 Linux Linux Kernel 3.4.3 Linux Linux Kernel 3.4.29 Linux Linux Kernel 3.4.1 Linux Linux Kernel 3.4 Rc6 Linux Linux Kernel 3.4 Rc5 Linux Linux Kernel 3.4 Rc2 Linux Linux Kernel 3.4 Rc1 Linux Linux Kernel 3.4 Linux Linux Kernel 3.3.6 Linux Linux Kernel 3.3.3 Linux Linux Kernel 3.3 Rc6 Linux Linux Kernel 3.3 Rc3 Linux Linux Kernel 3.3 Rc2 Linux Linux Kernel 3.3 Rc1 Linux Linux Kernel 3.2.5 Linux Linux Kernel 3.2.3 Linux Linux Kernel 3.2.2 Linux Linux Kernel 3.2 Rc7 Linux Linux Kernel 3.2 Rc5 Linux Linux Kernel 3.2 Rc2 Linux Linux Kernel 3.2 Linux Linux Kernel 3.12.1 Linux Linux Kernel 3.11.7 Linux Linux Kernel 3.11 Linux Linux Kernel 3.10.18 Linux Linux Kernel 3.10.17 Linux Linux Kernel 3.10.16 Linux Linux Kernel 3.10.15 Linux Linux Kernel 3.10.12 Linux Linux Kernel 3.10.11 Linux Linux Kernel 3.10.1 Linux Linux Kernel 3.1.8 Linux Linux Kernel 3.1.7 Linux Linux Kernel 3.1.5 Linux Linux Kernel 3.1.10 Linux Linux Kernel 3.1 Rc4 Linux Linux Kernel 3.1 Rc1 Linux Linux Kernel 3.0.9 Linux Linux Kernel 3.0.8 Linux Linux Kernel 3.0.7 Linux Linux Kernel 3.0.67 Linux Linux Kernel 3.0.66 Linux Linux Kernel 3.0.64 Linux Linux Kernel 3.0.63 Linux Linux Kernel 3.0.62 Linux Linux Kernel 3.0.57 Linux Linux Kernel 3.0.53 Linux Linux Kernel 3.0.51 Linux Linux Kernel 3.0.50 Linux Linux Kernel 3.0.49 Linux Linux Kernel 3.0.38 Linux Linux Kernel 3.0.3 Linux Linux Kernel 3.0.21 Linux Linux Kernel 3.0.19 Linux Linux Kernel 3.0 Rc7 Linux Linux Kernel 3.0 Rc4 Linux Linux Kernel 3.0 Rc2 Linux Linux Kernel 3.0 Rc1 CentOS CentOS 6 CentOS CentOS 5 Avaya one-X Client Enablement Services 6.2 Avaya IP Office Server Edition 9.0 Avaya IP Office Server Edition 8.1 Avaya IP Office Server Edition 8.0 Avaya IP Office Application Server 9.0 Avaya CMS r17 Avaya Aura System Platform 6.2.2 Avaya Aura System Platform 6.2.1 Avaya Aura System Platform 6.3 Avaya Aura System Platform 6.2 Avaya Aura Session Manager 6.3.1 Avaya Aura Session Manager 6.3 Avaya Aura Experience Portal 6.0.2 Avaya Aura Experience Portal 6.0.1 Avaya Aura Experience Portal 6.0 Avaya Aura Collaboration Environment 2.0 |
| Not Vulnerable: | |
Discussion
Linux Kernel CVE-2013-6368 Local Privilege Escalation Vulnerability
The Linux kernel is prone to a local privilege-escalation vulnerability.
Local attackers can exploit this issue to gain elevated privileges on affected computers or to cause a denial-of-service condition.
The Linux kernel is prone to a local privilege-escalation vulnerability.
Local attackers can exploit this issue to gain elevated privileges on affected computers or to cause a denial-of-service condition.
Exploit / POC
Linux Kernel CVE-2013-6368 Local Privilege Escalation Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Linux Kernel CVE-2013-6368 Local Privilege Escalation Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Linux Kernel CVE-2013-6368 Local Privilege Escalation Vulnerability
References:
References:
- CESA-2013:X018 Important Xen4CentOS kernel Security Update (CentOS)
- CVE-2013-6368 kvm: cross page vapic_addr access (Red Hat Bugzilla)
- Linux kernel Homepage (kernel.org)
- Download/kernel/rhel6/042stab085.17 (OpenVZ)
- Important: kernel security and bug fix update (Red Hat)
- kernel security, bug fix, and enhancement update (RHSA-2013-1801) (Avaya)
- kvm security update (RHSA-2014-0163) (Avaya)
- Security Advisory Important: kernel security, bug fix, and enhancement update (Red Hat)