NVD

Id
40108  
Name
CVE-2013-4511  
Description
Multiple integer overflows in Alchemy LCD frame-buffer drivers in the Linux kernel before 3.12 allow local users to create a read-write memory mapping for the entirety of kernel memory, and consequently gain privileges, via crafted mmap operations, related to the (1) au1100fb_fb_mmap function in drivers/video/au1100fb.c and the (2) au1200fb_fb_mmap function in drivers/video/au1200fb.c.  
Reject
 
CVSS Version
2  
CVSS Score
6.9  
Severity
Medium  
CVSS Base Score
6.9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2013-11-12  
Modified Date
2014-03-05  
Seq
2013-4511  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
204062 40108 CVE-2013-4511 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=7314e613d5ff9f0934f7a0f74ed7973b903315d1  View
204063 40108 CVE-2013-4511 openSUSE-SU-2014:0204  View
204064 40108 CVE-2013-4511 openSUSE-SU-2014:0205  View
204065 40108 CVE-2013-4511 openSUSE-SU-2014:0247  View
204066 40108 CVE-2013-4511 [oss-security] 20131104 Re: some unstracked linux kernel security fixes  View
204067 40108 CVE-2013-4511 USN-2036-1  View
204068 40108 CVE-2013-4511 USN-2037-1  View
204069 40108 CVE-2013-4511 USN-2066-1  View
204070 40108 CVE-2013-4511 USN-2067-1  View
204071 40108 CVE-2013-4511 USN-2068-1  View
204072 40108 CVE-2013-4511 USN-2069-1  View
204073 40108 CVE-2013-4511 USN-2070-1  View
204074 40108 CVE-2013-4511 USN-2071-1  View
204075 40108 CVE-2013-4511 USN-2072-1  View
204076 40108 CVE-2013-4511 USN-2073-1  View
204077 40108 CVE-2013-4511 USN-2074-1  View
204078 40108 CVE-2013-4511 USN-2075-1  View
204079 40108 CVE-2013-4511 USN-2076-1  View
204080 40108 CVE-2013-4511 https://github.com/torvalds/linux/commit/7314e613d5ff9f0934f7a0f74ed7973b903315d1  View
204081 40108 CVE-2013-4511 https://www.kernel.org/pub/linux/kernel/v3.x/patch-3.12.bz2  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
23491 JVNDB-2013-005066 Linux Kernel の Alchemy LCD フレームバッファドライバにおける整数オーバーフローの脆弱性 Linux Kernel の Alchemy LCD フレームバッファドライバには、(1) drivers/video/au1100fb.c の au1100fb_fb_mmap 関数、および (2) drivers/video/au1200fb.c の au1200fb_fb_mmap 関数に関する処理に不備があるため、整数オーバーフローの脆弱性が存在します。 CVE-2013-4511 64453 CVE-2013-4511 40108 6.9 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005066.html 2013-10-29 2013-11-13 View