Linux Kernel 'kvm_vm_ioctl_create_vcpu()' Function Local Privilege Escalation Vulnerability
BID:64328
Info
Linux Kernel 'kvm_vm_ioctl_create_vcpu()' Function Local Privilege Escalation Vulnerability
| Bugtraq ID: | 64328 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2013-4587 |
| Remote: | No |
| Local: | Yes |
| Published: | Dec 14 2013 12:00AM |
| Updated: | Apr 13 2015 10:23PM |
| Credit: | Andrew Honig of Google |
| Vulnerable: |
Ubuntu Ubuntu Linux 13.10 Ubuntu Ubuntu Linux 12.10 i386 Ubuntu Ubuntu Linux 12.10 amd64 Ubuntu Ubuntu Linux 12.04 LTS i386 Ubuntu Ubuntu Linux 12.04 LTS amd64 Ubuntu Ubuntu Linux 10.04 sparc Ubuntu Ubuntu Linux 10.04 powerpc Ubuntu Ubuntu Linux 10.04 i386 Ubuntu Ubuntu Linux 10.04 ARM Ubuntu Ubuntu Linux 10.04 amd64 SuSE SUSE Linux Enterprise Server for VMware 11 SP3 SuSE SUSE Linux Enterprise Server 11 SP3 SuSE SUSE Linux Enterprise High Availability Extension 11 SP3 SuSE Suse Linux Enterprise Desktop 11 SP3 SuSE Linux Enterprise Server 11 SP1 LTSS S.u.S.E. openSUSE 13.1 S.u.S.E. openSUSE 12.3 S.u.S.E. openSUSE 11.4 Oracle Linux 6 Mandriva Business Server 1 X86 64 Mandriva Business Server 1 Linux Linux Kernel 3.12.5 Linux Linux Kernel 3.4.74 Linux Linux Kernel 3.10.24 Linux kernel 3.2.53 Linux kernel 2.6.34.14 Linux kernel 2.6.32.61 Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64 CentOS CentOS 6 |
| Not Vulnerable: | |
Discussion
Linux Kernel 'kvm_vm_ioctl_create_vcpu()' Function Local Privilege Escalation Vulnerability
The Linux kernel is prone to a local privilege-escalation vulnerability.
Local attackers can exploit this issue to gain elevated privileges on affected computers. Other attacks are also possible.
The Linux kernel is prone to a local privilege-escalation vulnerability.
Local attackers can exploit this issue to gain elevated privileges on affected computers. Other attacks are also possible.
Exploit / POC
Linux Kernel 'kvm_vm_ioctl_create_vcpu()' Function Local Privilege Escalation Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Linux Kernel 'kvm_vm_ioctl_create_vcpu()' Function Local Privilege Escalation Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Mandriva Business Server 1 X86 64
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Mandriva Business Server 1 X86 64
-
Mandriva cpupower-3.4.76-1.1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva kernel-firmware-3.4.76-1.1.mbs1.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva kernel-headers-3.4.76-1.1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva kernel-server-3.4.76-1.1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva kernel-server-devel-3.4.76-1.1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva kernel-source-3.4.76-1.mbs1.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva lib64cpupower-devel-3.4.76-1.1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva lib64cpupower0-3.4.76-1.1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva perf-3.4.76-1.1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/
References
Linux Kernel 'kvm_vm_ioctl_create_vcpu()' Function Local Privilege Escalation Vulnerability
References:
References:
- CESA-2013:X018 Important Xen4CentOS kernel Security Update (CentOS)
- KVM: Improve create VCPU parameter (CVE-2013-4587) (Andy Honig)
- Linux kernel Homepage (kernel.org)
- Out of bounds array access in camera driver (CVE-2013-6123) (CodeAurora)
- ELSA-2014-3034 - Unbreakable Enterprise kernel security update (Red Hat)