NVD

Id
37990  
Name
CVE-2013-1848  
Description
fs/ext3/super.c in the Linux kernel before 3.8.4 uses incorrect arguments to functions in certain circumstances related to printk input, which allows local users to conduct format-string attacks and possibly gain privileges via a crafted application.  
Reject
 
CVSS Version
2  
CVSS Score
6.2  
Severity
Medium  
CVSS Base Score
6.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
1.9  
CVSS Vector
(AV:L/AC:H/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2013-03-22  
Modified Date
2014-02-06  
Seq
2013-1848  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
194020 37990 CVE-2013-1848 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=8d0c2d10dd72c5292eda7a06231056a4c972e4cc  View
194021 37990 CVE-2013-1848 openSUSE-SU-2013:0925  View
194022 37990 CVE-2013-1848 RHSA-2013:0928  View
194023 37990 CVE-2013-1848 RHSA-2013:1026  View
194024 37990 CVE-2013-1848 RHSA-2013:1051  View
194025 37990 CVE-2013-1848 http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.8.4  View
194026 37990 CVE-2013-1848 MDVSA-2013:176  View
194027 37990 CVE-2013-1848 [oss-security] 20130320 CVE-2013-1848 -- Linux kernel: ext3: format string issues  View
194028 37990 CVE-2013-1848 USN-1809-1  View
194029 37990 CVE-2013-1848 USN-1811-1  View
194030 37990 CVE-2013-1848 USN-1812-1  View
194031 37990 CVE-2013-1848 USN-1813-1  View
194032 37990 CVE-2013-1848 USN-1814-1  View
194033 37990 CVE-2013-1848 https://bugzilla.redhat.com/show_bug.cgi?id=920783  View
194034 37990 CVE-2013-1848 https://github.com/torvalds/linux/commit/8d0c2d10dd72c5292eda7a06231056a4c972e4cc  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
20428 JVNDB-2013-002003 Linux Kernel の fs/ext3/super.c におけるフォーマットストリング攻撃の脆弱性 Linux Kernel の fs/ext3/super.c は、printk 入力に関連した特定の状況で、関数に不正な引数を使用するため、フォーマットストリング攻撃を実行される、および権限を取得される脆弱性が存在します。 CVE-2013-1848 61790 CVE-2013-1848 37990 6.2 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-002003.html 2013-03-20 2014-03-06 View