PT-2013-3476
CVE-2013-1928
·
تاريخ النشر
2013-04-29
·
تاريخ التحديث
2023-02-13
الوصف من
CVSS 2.0
4.7
متوسطةالمقاييسAV:L/AC:M/Au:N/C:C/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 3.6.5
Description
The issue is related to a lack of error checking in the
do video set spu palette function, which could potentially allow local users to access sensitive information from kernel stack memory. This can be achieved through a crafted VIDEO SET SPU PALETTE ioctl call on a /dev/dvb device.Recommendations
For Linux kernel versions prior to 3.6.5, update to version 3.6.5 or later to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾