CVE

Id
66327  
CVE No.
CVE-2013-6380  
Status
Candidate  
Description
The aac_send_raw_srb function in drivers/scsi/aacraid/commctrl.c in the Linux kernel through 3.12.1 does not properly validate a certain size value, which allows local users to cause a denial of service (invalid pointer dereference) or possibly have unspecified other impact via an FSACTL_SEND_RAW_SRB ioctl call that triggers a crafted SRB command.  
Phase
Assigned (20131104)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
644508 66327 CVE-2013-6380 MLIST:[oss-security] 20131122 Linux kernel CVE fixes  View
644509 66327 CVE-2013-6380 URL:http://www.openwall.com/lists/oss-security/2013/11/22/5  View
644510 66327 CVE-2013-6380 CONFIRM:http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=b4789b8e6be3151a955ade74872822f30e8cd914  View
644511 66327 CVE-2013-6380 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=1033593  View
644512 66327 CVE-2013-6380 CONFIRM:https://github.com/torvalds/linux/commit/b4789b8e6be3151a955ade74872822f30e8cd914  View
644513 66327 CVE-2013-6380 SUSE:openSUSE-SU-2014:0247  View
644514 66327 CVE-2013-6380 URL:http://lists.opensuse.org/opensuse-updates/2014-02/msg00045.html  View
644515 66327 CVE-2013-6380 SUSE:openSUSE-SU-2014:0204  View
644516 66327 CVE-2013-6380 URL:http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00002.html  View
644517 66327 CVE-2013-6380 UBUNTU:USN-2070-1  View
644518 66327 CVE-2013-6380 URL:http://www.ubuntu.com/usn/USN-2070-1  View
644519 66327 CVE-2013-6380 UBUNTU:USN-2075-1  View
644520 66327 CVE-2013-6380 URL:http://www.ubuntu.com/usn/USN-2075-1  View
644521 66327 CVE-2013-6380 UBUNTU:USN-2109-1  View
644522 66327 CVE-2013-6380 URL:http://www.ubuntu.com/usn/USN-2109-1  View
644523 66327 CVE-2013-6380 UBUNTU:USN-2110-1  View
644524 66327 CVE-2013-6380 URL:http://www.ubuntu.com/usn/USN-2110-1  View
644525 66327 CVE-2013-6380 UBUNTU:USN-2111-1  View
644526 66327 CVE-2013-6380 URL:http://www.ubuntu.com/usn/USN-2111-1  View
644527 66327 CVE-2013-6380 UBUNTU:USN-2114-1  View
644528 66327 CVE-2013-6380 URL:http://www.ubuntu.com/usn/USN-2114-1  View
644529 66327 CVE-2013-6380 UBUNTU:USN-2115-1  View
644530 66327 CVE-2013-6380 URL:http://www.ubuntu.com/usn/USN-2115-1  View
644531 66327 CVE-2013-6380 UBUNTU:USN-2116-1  View
644532 66327 CVE-2013-6380 URL:http://www.ubuntu.com/usn/USN-2116-1  View
644533 66327 CVE-2013-6380 UBUNTU:USN-2128-1  View
644534 66327 CVE-2013-6380 URL:http://www.ubuntu.com/usn/USN-2128-1  View
644535 66327 CVE-2013-6380 UBUNTU:USN-2129-1  View
644536 66327 CVE-2013-6380 URL:http://www.ubuntu.com/usn/USN-2129-1  View
644537 66327 CVE-2013-6380 UBUNTU:USN-2136-1  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
23807 JVNDB-2013-005382 Drupal の form API における任意のコードを実行するようなアプリケーション固有の影響を誘発される脆弱性 Drupal の form API は、不特定のサードパーティ製モジュールで使用される際、CSRF の検証が失敗した場合でも、フォーム検証を行うため、任意のコードを実行するようなアプリケーション固有の影響を誘発される脆弱性が存在します。 CVE-2013-6385 66327 5.1 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005382.html  View