CVE-2013-6382

Description

Multiple buffer underflows in the XFS implementation in the Linux kernel through 3.12.1 allow local users to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging the CAP_SYS_ADMIN capability for a (1) XFS_IOC_ATTRLIST_BY_HANDLE or (2) XFS_IOC_ATTRLIST_BY_HANDLE_32 ioctl call with a crafted length value, related to the xfs_attrlist_by_handle function in fs/xfs/xfs_ioctl.c and the xfs_compat_attrlist_by_handle function in fs/xfs/xfs_ioctl32.c.

Risk Information

Base Score

7.8

MODERATE

Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

0.064

Associated Vulnerability

Vulnerability	OS Platform
Linux hardware enablement kernel from Quantal (USN-2135-1) linux-image-3.5.0-47-generic_3.5.0-47.71~precise1_i386.deb	Linux
Linux hardware enablement kernel from Quantal (USN-2135-1) linux-image-3.5.0-47-generic_3.5.0-47.71~precise1_amd64.deb	Linux
Linux hardware enablement kernel from Raring (USN-2158-1) linux-image-3.8.0-38-generic_3.8.0-38.56~precise1_i386.deb	Linux
Linux hardware enablement kernel from Raring (USN-2158-1) linux-image-3.8.0-38-generic_3.8.0-38.56~precise1_amd64.deb	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234