PT-2013-3406 · Linux+1 · Linux Kernel+1

CVE-2013-1819

·

Publicado

2013-03-06

·

Atualizado

2023-02-13

CVSS v2.0

4.6

Média

VetorAV:L/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.7.6
Description The issue is related to the xfs buf find function in fs/xfs/xfs buf.c, which does not validate block numbers. This allows local users to cause a denial of service, resulting in a NULL pointer dereference and system crash, or possibly have other unspecified impacts. This can be achieved by mounting an XFS filesystem containing a metadata inode with an invalid extent map.
Recommendations For Linux kernel versions prior to 3.7.6, update to version 3.7.6 or later to resolve the issue.

Correção

DoS

RCE

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2013-1819
RHSA-2013:0829
SUSE-RU-2015:0621-1
SUSE-SU-2015:0481-1
SUSE-SU-2015:0581-1
SUSE-SU-2015:0736-1
SUSE-SU-2015:1174-1
SUSE-SU-2015:1376-1
USN-1968-1
USN-1969-1
USN-1970-1
USN-1972-1
USN-1973-1
USN-1975-1

Produtos afetados

Linux Kernel
Suse