NVD

Id
41369  
Name
CVE-2013-6282  
Description
The (1) get_user and (2) put_user API functions in the Linux kernel before 3.5.5 on the v6k and v7 ARM platforms do not validate certain addresses, which allows attackers to read or modify the contents of arbitrary kernel memory locations via a crafted application, as exploited in the wild against Android devices in October and November 2013.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2013-11-20  
Modified Date
2017-01-02  
Seq
2013-6282  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
209046 41369 CVE-2013-6282 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=8404663f81d212918ff85f493649a7991209fa04  View
209047 41369 CVE-2013-6282 http://www.codeaurora.org/projects/security-advisories/missing-access-checks-putusergetuser-kernel-api-cve-2013-6282  View
209048 41369 CVE-2013-6282 http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.5.5  View
209049 41369 CVE-2013-6282 [oss-security] 20131114 CVE-2013-6282 - linux kernel: missing access checks in get_user/put_user on ARM  View
209050 41369 CVE-2013-6282 63734  View
209051 41369 CVE-2013-6282 USN-2067-1  View
209052 41369 CVE-2013-6282 https://github.com/torvalds/linux/commit/8404663f81d212918ff85f493649a7991209fa04  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
23614 JVNDB-2013-005189 v6k および v7 ARM プラットフォーム上で稼働する Linux Kernel の API 関数における任意のカーネルメモリ領域のコンテンツを読まれる脆弱性 v6k および v7 ARM プラットフォーム上で稼働する Linux Kernel の (1) get_user および (2) put_user API 関数は、特定のアドレスを検証しないため、任意のカーネルメモリ領域のコンテンツを読まれる、または変更される脆弱性が存在します。 CVE-2013-6282 66224 CVE-2013-6282 41369 7.2 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005189.html 2013-11-14 2013-11-21 View