Vulnerability Details : CVE-2013-2851
Format string vulnerability in the register_disk function in block/genhd.c in the Linux kernel through 3.9.4 allows local users to gain privileges by leveraging root access and writing format string specifiers to /sys/module/md_mod/parameters/new_array in order to create a crafted /dev/md device name.
Vulnerability category: Overflow
Exploit prediction scoring system (EPSS) score for CVE-2013-2851
Probability of exploitation activity in the next 30 days: 0.07%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 28 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2013-2851
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
|---|---|---|---|---|---|
|
6.0
|
MEDIUM | AV:L/AC:H/Au:S/C:C/I:C/A:C |
1.5
|
10.0
|
NIST |
CWE ids for CVE-2013-2851
-
The product uses a function that accepts a format string as an argument, but the format string originates from an external source.Assigned by: nvd@nist.gov (Primary)
References for CVE-2013-2851
-
http://marc.info/?l=linux-kernel&m=137055204522556&w=2
'[PATCH 1/8] block: do not pass disk names as format strings' - MARC
-
http://www.debian.org/security/2013/dsa-2766
Debian -- Security Information -- DSA-2766-1 linux-2.6
-
http://www.ubuntu.com/usn/USN-1941-1
USN-1941-1: Linux kernel vulnerabilities | Ubuntu security notices
-
http://www.ubuntu.com/usn/USN-1912-1
USN-1912-1: Linux kernel vulnerabilities | Ubuntu security notices
-
http://rhn.redhat.com/errata/RHSA-2013-1783.html
RHSA-2013:1783 - Security Advisory - Red Hat Customer Portal
-
http://www.openwall.com/lists/oss-security/2013/06/06/13
oss-security - Linux kernel format string flaws
-
https://bugzilla.redhat.com/show_bug.cgi?id=969515
969515 – (CVE-2013-2851) CVE-2013-2851 kernel: block: passing disk names as format stringsVendor Advisory
-
http://lists.opensuse.org/opensuse-security-announce/2013-09/msg00004.html
[security-announce] SUSE-SU-2013:1474-1: important: Security update for
-
http://rhn.redhat.com/errata/RHSA-2014-0284.html
RHSA-2014:0284 - Security Advisory - Red Hat Customer Portal
-
http://www.ubuntu.com/usn/USN-1942-1
USN-1942-1: Linux kernel (OMAP4) vulnerabilities | Ubuntu security notices
-
http://www.ubuntu.com/usn/USN-1913-1
USN-1913-1: Linux kernel (EC2) vulnerabilities | Ubuntu security notices
-
http://lists.opensuse.org/opensuse-security-announce/2013-09/msg00003.html
[security-announce] SUSE-SU-2013:1473-1: important: Security update for
-
http://rhn.redhat.com/errata/RHSA-2013-1645.html
RHSA-2013:1645 - Security Advisory - Red Hat Customer Portal
-
http://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html
openSUSE-SU-2013:1971-1: moderate: kernel: security and bugfix update
Products affected by CVE-2013-2851
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:3.9:rc3:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:3.9:rc6:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:3.9.1:*:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:3.9.2:*:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:3.9:rc2:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:3.9:rc4:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:3.9.0:*:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:3.9:rc1:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:3.9:rc5:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:3.9:rc7:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:3.9.3:*:*:*:*:*:*:*