NVD

Id
37182  
Name
CVE-2013-0914  
Description
The flush_signal_handlers function in kernel/signal.c in the Linux kernel before 3.8.4 preserves the value of the sa_restorer field across an exec operation, which makes it easier for local users to bypass the ASLR protection mechanism via a crafted application containing a sigaction system call.  
Reject
 
CVSS Version
2  
CVSS Score
3.6  
Severity
Low  
CVSS Base Score
3.6  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:P/A:N)  
Pub Date
2017-01-18  
Published
2013-03-22  
Modified Date
2014-02-06  
Seq
2013-0914  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
190196 37182 CVE-2013-0914 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=2ca39528c01a933f6689cd6505ce65bd6d68a530  View
190197 37182 CVE-2013-0914 openSUSE-SU-2013:1187  View
190198 37182 CVE-2013-0914 openSUSE-SU-2013:1971  View
190199 37182 CVE-2013-0914 RHSA-2013:1051  View
190200 37182 CVE-2013-0914 http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.8.4  View
190201 37182 CVE-2013-0914 MDVSA-2013:176  View
190202 37182 CVE-2013-0914 [oss-security] 20130311 CVE-2013-0914 Linux kernel sa_restorer information leak  View
190203 37182 CVE-2013-0914 USN-1787-1  View
190204 37182 CVE-2013-0914 USN-1788-1  View
190205 37182 CVE-2013-0914 USN-1792-1  View
190206 37182 CVE-2013-0914 USN-1793-1  View
190207 37182 CVE-2013-0914 USN-1794-1  View
190208 37182 CVE-2013-0914 USN-1795-1  View
190209 37182 CVE-2013-0914 USN-1796-1  View
190210 37182 CVE-2013-0914 USN-1797-1  View
190211 37182 CVE-2013-0914 USN-1798-1  View
190212 37182 CVE-2013-0914 https://bugzilla.redhat.com/show_bug.cgi?id=920499  View
190213 37182 CVE-2013-0914 https://github.com/torvalds/linux/commit/2ca39528c01a933f6689cd6505ce65bd6d68a530  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
20422 JVNDB-2013-001997 Linux Kernel の kernel/signal.c における ASLR 保護メカニズムを回避される脆弱性 Linux Kernel の kernel/signal.c 内の flush_signal_handlers 関数は、exec 操作全般にわたって sa_restorer フィールドの値を保持するため、ASLR 保護メカニズムを回避される脆弱性が存在します。 CVE-2013-0914 60856 CVE-2013-0914 37182 3.6 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001997.html 2013-03-20 2014-02-26 View