NVD

Id
38843  
Name
CVE-2013-2930  
Description
The perf_trace_event_perm function in kernel/trace/trace_event_perf.c in the Linux kernel before 3.12.2 does not properly restrict access to the perf subsystem, which allows local users to enable function tracing via a crafted application.  
Reject
 
CVSS Version
2  
CVSS Score
3.6  
Severity
Low  
CVSS Base Score
3.6  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:P/A:N)  
Pub Date
2017-01-18  
Published
2013-12-09  
Modified Date
2014-03-05  
Seq
2013-2930  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
199199 38843 CVE-2013-2930 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=12ae030d54ef250706da5642fc7697cc60ad0df7  View
199200 38843 CVE-2013-2930 RHSA-2014:0100  View
199201 38843 CVE-2013-2930 http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.12.2  View
199202 38843 CVE-2013-2930 USN-2068-1  View
199203 38843 CVE-2013-2930 USN-2070-1  View
199204 38843 CVE-2013-2930 USN-2071-1  View
199205 38843 CVE-2013-2930 USN-2072-1  View
199206 38843 CVE-2013-2930 USN-2074-1  View
199207 38843 CVE-2013-2930 USN-2075-1  View
199208 38843 CVE-2013-2930 USN-2076-1  View
199209 38843 CVE-2013-2930 USN-2112-1  View
199210 38843 CVE-2013-2930 https://github.com/torvalds/linux/commit/12ae030d54ef250706da5642fc7697cc60ad0df7  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
23862 JVNDB-2013-005437 Linux Kernel の kernel/trace/trace_event_perf.c の perf_trace_event_perm 関数における関数のトレースを有効にされる脆弱性 Linux Kernel の kernel/trace/trace_event_perf.c の perf_trace_event_perm 関数は、perf サブシステムへのアクセスを適切に制限しないため、関数のトレースを有効にされる脆弱性が存在します。 CVE-2013-2930 62872 CVE-2013-2930 38843 3.6 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005437.html 2013-11-29 2013-12-11 View