NVD

Id
38239  
Name
CVE-2013-2140  
Description
The dispatch_discard_io function in drivers/block/xen-blkback/blkback.c in the Xen blkback implementation in the Linux kernel before 3.10.5 allows guest OS users to cause a denial of service (data loss) via filesystem write operations on a read-only disk that supports the (1) BLKIF_OP_DISCARD (aka discard or TRIM) or (2) SCSI UNMAP feature.  
Reject
 
CVSS Version
2  
CVSS Score
3.8  
Severity
Low  
CVSS Base Score
3.8  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
4.4  
CVSS Vector
(AV:A/AC:M/Au:S/C:N/I:P/A:P)  
Pub Date
2017-01-18  
Published
2013-09-25  
Modified Date
2014-01-03  
Seq
2013-2140  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
195526 38239 CVE-2013-2140 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=604c499cbbcc3d5fe5fb8d53306aa0fae1990109  View
195527 38239 CVE-2013-2140 http://people.canonical.com/~ubuntu-security/cve/2013/CVE-2013-2140.html  View
195528 38239 CVE-2013-2140 http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.10.5  View
195529 38239 CVE-2013-2140 [oss-security] 20130605 Re: xen/blkback: Check device permissions before allowing OP_DISCARD  View
195530 38239 CVE-2013-2140 USN-1938-1  View
195531 38239 CVE-2013-2140 USN-1943-1  View
195532 38239 CVE-2013-2140 USN-1944-1  View
195533 38239 CVE-2013-2140 USN-1945-1  View
195534 38239 CVE-2013-2140 USN-1946-1  View
195535 38239 CVE-2013-2140 USN-1947-1  View
195536 38239 CVE-2013-2140 USN-2038-1  View
195537 38239 CVE-2013-2140 USN-2039-1  View
195538 38239 CVE-2013-2140 https://bugzilla.redhat.com/show_bug.cgi?id=971146  View
195539 38239 CVE-2013-2140 https://github.com/torvalds/linux/commit/604c499cbbcc3d5fe5fb8d53306aa0fae1990109  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
22747 JVNDB-2013-004322 Linux Kernel の Xen blkback の実装におけるサービス運用妨害 (DoS) の脆弱性 Linux Kernel の Xen blkback の実装の drivers/block/xen-blkback/blkback.c 内の dispatch_discard_io 関数には、サービス運用妨害 (データロス) 状態にされる脆弱性が存在します。 CVE-2013-2140 62082 CVE-2013-2140 38239 3.8 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-004322.html 2013-08-04 2013-11-01 View