NVD

Id
37140  
Name
CVE-2013-0871  
Description
Race condition in the ptrace functionality in the Linux kernel before 3.7.5 allows local users to gain privileges via a PTRACE_SETREGS ptrace system call in a crafted application, as demonstrated by ptrace_death.  
Reject
 
CVSS Version
2  
CVSS Score
6.9  
Severity
Medium  
CVSS Base Score
6.9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2013-02-17  
Modified Date
2013-06-20  
Seq
2013-0871  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
189986 37140 CVE-2013-0871 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=9899d11f654474d2d54ea52ceaa2a1f4db3abd68  View
189987 37140 CVE-2013-0871 SUSE-SU-2013:0341  View
189988 37140 CVE-2013-0871 SUSE-SU-2013:0674  View
189989 37140 CVE-2013-0871 openSUSE-SU-2013:0925  View
189990 37140 CVE-2013-0871 RHSA-2013:0567  View
189991 37140 CVE-2013-0871 RHSA-2013:0661  View
189992 37140 CVE-2013-0871 RHSA-2013:0662  View
189993 37140 CVE-2013-0871 RHSA-2013:0695  View
189994 37140 CVE-2013-0871 DSA-2632  View
189995 37140 CVE-2013-0871 http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.7.5  View
189996 37140 CVE-2013-0871 [oss-security] 20130215 Linux kernel race condition with PTRACE_SETREGS (CVE-2013-0871)  View
189997 37140 CVE-2013-0871 USN-1736-1  View
189998 37140 CVE-2013-0871 USN-1737-1  View
189999 37140 CVE-2013-0871 USN-1738-1  View
190000 37140 CVE-2013-0871 USN-1739-1  View
190001 37140 CVE-2013-0871 USN-1740-1  View
190002 37140 CVE-2013-0871 USN-1741-1  View
190003 37140 CVE-2013-0871 USN-1742-1  View
190004 37140 CVE-2013-0871 USN-1743-1  View
190005 37140 CVE-2013-0871 USN-1744-1  View
190006 37140 CVE-2013-0871 USN-1745-1  View
190007 37140 CVE-2013-0871 https://bugzilla.redhat.com/show_bug.cgi?id=911937  View
190008 37140 CVE-2013-0871 https://github.com/torvalds/linux/commit/9899d11f654474d2d54ea52ceaa2a1f4db3abd68  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
20025 JVNDB-2013-001600 Linux Kernel の ptrace 機能における権限を取得される脆弱性 Linux Kernel の ptrace 機能には、競合状態により、権限を取得される脆弱性が存在します。 CVE-2013-0871 60813 CVE-2013-0871 37140 6.9 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001600.html 2013-01-27 2013-06-28 View