CVE

Id
63248  
CVE No.
CVE-2013-3301  
Status
Candidate  
Description
The ftrace implementation in the Linux kernel before 3.8.8 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by leveraging the CAP_SYS_ADMIN capability for write access to the (1) set_ftrace_pid or (2) set_graph_function file, and then making an lseek system call.  
Phase
Assigned (20130428)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
628781 63248 CVE-2013-3301 MLIST:[oss-security] 20130415 CVE request - Linux kernel: tracing NULL pointer dereference  View
628782 63248 CVE-2013-3301 URL:http://www.openwall.com/lists/oss-security/2013/04/15/1  View
628783 63248 CVE-2013-3301 CONFIRM:http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=6a76f8c0ab19f215af2a3442870eeb5f0e81998d  View
628784 63248 CVE-2013-3301 CONFIRM:http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.8.8  View
628785 63248 CVE-2013-3301 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=952197  View
628786 63248 CVE-2013-3301 CONFIRM:https://github.com/torvalds/linux/commit/6a76f8c0ab19f215af2a3442870eeb5f0e81998d  View
628787 63248 CVE-2013-3301 REDHAT:RHSA-2013:1051  View
628788 63248 CVE-2013-3301 URL:http://rhn.redhat.com/errata/RHSA-2013-1051.html  View
628789 63248 CVE-2013-3301 SUSE:SUSE-SU-2013:1473  View
628790 63248 CVE-2013-3301 URL:http://lists.opensuse.org/opensuse-security-announce/2013-09/msg00003.html  View
628791 63248 CVE-2013-3301 SUSE:openSUSE-SU-2013:1971  View
628792 63248 CVE-2013-3301 URL:http://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html  View
628793 63248 CVE-2013-3301 UBUNTU:USN-1834-1  View
628794 63248 CVE-2013-3301 URL:http://www.ubuntu.com/usn/USN-1834-1  View
628795 63248 CVE-2013-3301 UBUNTU:USN-1835-1  View
628796 63248 CVE-2013-3301 URL:http://www.ubuntu.com/usn/USN-1835-1  View
628797 63248 CVE-2013-3301 UBUNTU:USN-1836-1  View
628798 63248 CVE-2013-3301 URL:http://www.ubuntu.com/usn/USN-1836-1  View
628799 63248 CVE-2013-3301 UBUNTU:USN-1838-1  View

Related JVN