NVD

Id
38764  
Name
CVE-2013-2851  
Description
Format string vulnerability in the register_disk function in block/genhd.c in the Linux kernel through 3.9.4 allows local users to gain privileges by leveraging root access and writing format string specifiers to /sys/module/md_mod/parameters/new_array in order to create a crafted /dev/md device name.  
Reject
 
CVSS Version
2  
CVSS Score
6  
Severity
Medium  
CVSS Base Score
6  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
1.5  
CVSS Vector
(AV:L/AC:H/Au:S/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2013-06-07  
Modified Date
2014-03-26  
Seq
2013-2851  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
198515 38764 CVE-2013-2851 SUSE-SU-2013:1473  View
198516 38764 CVE-2013-2851 SUSE-SU-2013:1474  View
198517 38764 CVE-2013-2851 openSUSE-SU-2013:1971  View
198518 38764 CVE-2013-2851 [linux-kernel] 20130606 [PATCH 1/8] block: do not pass disk names as format strings  View
198519 38764 CVE-2013-2851 RHSA-2013:1645  View
198520 38764 CVE-2013-2851 RHSA-2013:1783  View
198521 38764 CVE-2013-2851 RHSA-2014:0284  View
198522 38764 CVE-2013-2851 DSA-2766  View
198523 38764 CVE-2013-2851 [oss-security] 20130606 Linux kernel format string flaws  View
198524 38764 CVE-2013-2851 USN-1912-1  View
198525 38764 CVE-2013-2851 USN-1913-1  View
198526 38764 CVE-2013-2851 USN-1941-1  View
198527 38764 CVE-2013-2851 USN-1942-1  View
198528 38764 CVE-2013-2851 https://bugzilla.redhat.com/show_bug.cgi?id=969515  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
21349 JVNDB-2013-002924 Linux Kernel の block/genhd.c におけるフォーマットストリングの脆弱性 Linux Kernel の block/genhd.c の register_disk 関数には、フォーマットストリングの脆弱性が存在します。 CVE-2013-2851 62793 CVE-2013-2851 38764 6 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-002924.html 2013-05-31 2015-08-06 View