NVD

Id
41442  
Name
CVE-2013-6383  
Description
The aac_compat_ioctl function in drivers/scsi/aacraid/linit.c in the Linux kernel before 3.11.8 does not require the CAP_SYS_RAWIO capability, which allows local users to bypass intended access restrictions via a crafted ioctl call.  
Reject
 
CVSS Version
2  
CVSS Score
6.9  
Severity
Medium  
CVSS Base Score
6.9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2013-11-26  
Modified Date
2014-03-26  
Seq
2013-6383  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
209367 41442 CVE-2013-6383 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=f856567b930dfcdbc3323261bf77240ccdde01f5  View
209368 41442 CVE-2013-6383 RHSA-2014:0100  View
209369 41442 CVE-2013-6383 RHSA-2014:0285  View
209370 41442 CVE-2013-6383 http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.11.8  View
209371 41442 CVE-2013-6383 [oss-security] 20131122 Linux kernel CVE fixes  View
209372 41442 CVE-2013-6383 USN-2066-1  View
209373 41442 CVE-2013-6383 USN-2067-1  View
209374 41442 CVE-2013-6383 USN-2068-1  View
209375 41442 CVE-2013-6383 USN-2069-1  View
209376 41442 CVE-2013-6383 USN-2070-1  View
209377 41442 CVE-2013-6383 USN-2071-1  View
209378 41442 CVE-2013-6383 USN-2072-1  View
209379 41442 CVE-2013-6383 USN-2073-1  View
209380 41442 CVE-2013-6383 USN-2074-1  View
209381 41442 CVE-2013-6383 USN-2075-1  View
209382 41442 CVE-2013-6383 USN-2076-1  View
209383 41442 CVE-2013-6383 USN-2107-1  View
209384 41442 CVE-2013-6383 USN-2108-1  View
209385 41442 CVE-2013-6383 https://bugzilla.redhat.com/show_bug.cgi?id=1033530  View
209386 41442 CVE-2013-6383 https://github.com/torvalds/linux/commit/f856567b930dfcdbc3323261bf77240ccdde01f5  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
23742 JVNDB-2013-005317 Linux Kernel の drivers/scsi/aacraid/linit.c の aac_compat_ioctl 関数におけるアクセス制限を回避される脆弱性 Linux Kernel の drivers/scsi/aacraid/linit.c の aac_compat_ioctl 関数は、CAP_SYS_RAWIO ケーパビリティを必要としないため、アクセス制限を回避される脆弱性が存在します。 CVE-2013-6383 66325 CVE-2013-6383 41442 6.9 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005317.html 2013-11-13 2015-08-03 View