NVD

Id
37922  
Name
CVE-2013-1772  
Description
The log_prefix function in kernel/printk.c in the Linux kernel 3.x before 3.4.33 does not properly remove a prefix string from a syslog header, which allows local users to cause a denial of service (buffer overflow and system crash) by leveraging /dev/kmsg write access and triggering a call_console_drivers function call.  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
1.9  
CVSS Vector
(AV:L/AC:H/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-18  
Published
2013-02-28  
Modified Date
2013-08-22  
Seq
2013-1772  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
193537 37922 CVE-2013-1772 openSUSE-SU-2013:1187  View
193538 37922 CVE-2013-1772 http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.4.33  View
193539 37922 CVE-2013-1772 [oss-security] 20130226 Re: CVE request -- Linux kernel: call_console_drivers() Function Log Prefix Stripping buffer overflow  View
193540 37922 CVE-2013-1772 https://bugzilla.redhat.com/show_bug.cgi?id=916075  View
193541 37922 CVE-2013-1772 https://github.com/torvalds/linux/commit/ce0030c00f95cf9110d9cdcd41e901e1fb814417  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
20141 JVNDB-2013-001716 Linux Kernel の kernel/printk.c におけるサービス運用妨害 (DoS) の脆弱性 Linux Kernel の kernel/printk.c 内の log_prefix 関数は、syslog ヘッダから prefix 文字列を適切に削除しないため、サービス運用妨害 (バッファオーバーフローおよびシステムクラッシュ) 状態となる脆弱性が存在します。 CVE-2013-1772 61714 CVE-2013-1772 37922 4 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001716.html 2013-02-21 2013-03-04 View