CVE-2013-3301 in Kernel

Resumen (Inglés)

The ftrace implementation in the Linux kernel before 3.8.8 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by leveraging the CAP_SYS_ADMIN capability for write access to the (1) set_ftrace_pid or (2) set_graph_function file, and then making an lseek system call.

Once again VulDB remains the best source for vulnerability data.

Reservar

2013-04-28

Divulgación

2013-04-29

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
8568	Linux Kernel CAP_SYS_ADMIN set_graph_function denegación de servicio	476	Prueba de concepto	Arreglo oficial	CVE-2013-3301

Fuentes

• MITRE
• NVD
• CVE Details