NVD

Id
41441  
Name
CVE-2013-6382  
Description
Multiple buffer underflows in the XFS implementation in the Linux kernel through 3.12.1 allow local users to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging the CAP_SYS_ADMIN capability for a (1) XFS_IOC_ATTRLIST_BY_HANDLE or (2) XFS_IOC_ATTRLIST_BY_HANDLE_32 ioctl call with a crafted length value, related to the xfs_attrlist_by_handle function in fs/xfs/xfs_ioctl.c and the xfs_compat_attrlist_by_handle function in fs/xfs/xfs_ioctl32.c.  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
1.9  
CVSS Vector
(AV:L/AC:H/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-18  
Published
2013-11-26  
Modified Date
2016-12-30  
Seq
2013-6382  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
209352 41441 CVE-2013-6382 [oss-security] 20131122 Linux kernel CVE fixes  View
209353 41441 CVE-2013-6382 63889  View
209354 41441 CVE-2013-6382 [xfs] 20131031 [patch] xfs: underflow bug in xfs_attrlist_by_handle()  View
209355 41441 CVE-2013-6382 USN-2109-1  View
209356 41441 CVE-2013-6382 USN-2110-1  View
209357 41441 CVE-2013-6382 USN-2113-1  View
209358 41441 CVE-2013-6382 USN-2117-1  View
209359 41441 CVE-2013-6382 USN-2128-1  View
209360 41441 CVE-2013-6382 USN-2129-1  View
209361 41441 CVE-2013-6382 USN-2135-1  View
209362 41441 CVE-2013-6382 USN-2138-1  View
209363 41441 CVE-2013-6382 USN-2139-1  View
209364 41441 CVE-2013-6382 USN-2141-1  View
209365 41441 CVE-2013-6382 USN-2158-1  View
209366 41441 CVE-2013-6382 https://bugzilla.redhat.com/show_bug.cgi?id=1033603  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
23741 JVNDB-2013-005316 Linux Kernel の XFS の実装におけるバッファアンダーフローの脆弱性 Linux Kernel の XFS の実装には、fs/xfs/xfs_ioctl.c の xfs_attrlist_by_handle 関数および fs/xfs/xfs_ioctl32.c の xfs_compat_attrlist_by_handle 関数に関する処理に不備があるため、バッファアンダーフローの脆弱性が存在します。 CVE-2013-6382 66324 CVE-2013-6382 41441 4 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005316.html 2013-10-31 2013-11-28 View