PT-2013-3381

CVE-2013-1772

·

Published

2013-02-28

·

Updated

2013-08-22

Description by

CVSS 2.0
4.0
Medium
MetricsAV:L/AC:H/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.4.33
Description The issue is related to the log prefix function in kernel/printk.c, which does not properly remove a prefix string from a syslog header. This allows local users to cause a denial of service, resulting in a buffer overflow and system crash, by leveraging /dev/kmsg write access and triggering a call console drivers function call.
Recommendations For Linux kernel versions prior to 3.4.33, update to version 3.4.33 or later to resolve the issue.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
OPENSUSE-SU-2013_1187-1
RHSA-2013:0566
SUSE-SU-2015:0481-1
USN-1767-1
USN-1781-1
Found an issue in the description? Have something to add? Feel free to write us 👾