NVD

Id
41439  
Name
CVE-2013-6380  
Description
The aac_send_raw_srb function in drivers/scsi/aacraid/commctrl.c in the Linux kernel through 3.12.1 does not properly validate a certain size value, which allows local users to cause a denial of service (invalid pointer dereference) or possibly have unspecified other impact via an FSACTL_SEND_RAW_SRB ioctl call that triggers a crafted SRB command.  
Reject
 
CVSS Version
2  
CVSS Score
4.7  
Severity
Medium  
CVSS Base Score
4.7  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-18  
Published
2013-11-26  
Modified Date
2014-03-16  
Seq
2013-6380  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
209327 41439 CVE-2013-6380 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=b4789b8e6be3151a955ade74872822f30e8cd914  View
209328 41439 CVE-2013-6380 openSUSE-SU-2014:0204  View
209329 41439 CVE-2013-6380 openSUSE-SU-2014:0247  View
209330 41439 CVE-2013-6380 [oss-security] 20131122 Linux kernel CVE fixes  View
209331 41439 CVE-2013-6380 USN-2070-1  View
209332 41439 CVE-2013-6380 USN-2075-1  View
209333 41439 CVE-2013-6380 USN-2109-1  View
209334 41439 CVE-2013-6380 USN-2110-1  View
209335 41439 CVE-2013-6380 USN-2111-1  View
209336 41439 CVE-2013-6380 USN-2114-1  View
209337 41439 CVE-2013-6380 USN-2115-1  View
209338 41439 CVE-2013-6380 USN-2116-1  View
209339 41439 CVE-2013-6380 USN-2128-1  View
209340 41439 CVE-2013-6380 USN-2129-1  View
209341 41439 CVE-2013-6380 USN-2136-1  View
209342 41439 CVE-2013-6380 https://bugzilla.redhat.com/show_bug.cgi?id=1033593  View
209343 41439 CVE-2013-6380 https://github.com/torvalds/linux/commit/b4789b8e6be3151a955ade74872822f30e8cd914  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
23739 JVNDB-2013-005314 Linux Kernel の drivers/scsi/aacraid/commctrl.c の aac_send_raw_srb 関数におけるサービス運用妨害 (DoS) の脆弱性 Linux Kernel の drivers/scsi/aacraid/commctrl.c の aac_send_raw_srb 関数は、特定のサイズ値を適切に検証しないため、サービス運用妨害 (無効なポインタデリファレンス) 状態にされるなど、不特定の影響を受ける脆弱性が存在します。 CVE-2013-6380 66322 CVE-2013-6380 41439 4.7 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005314.html 2013-11-19 2013-11-28 View