CVE - CVE-2013-4483

CVE-ID
CVE-2013-4483	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
The ipc_rcu_putref function in ipc/util.c in the Linux kernel before 3.10 does not properly manage a reference count, which allows local users to cause a denial of service (memory consumption or system crash) via a crafted application.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:RHSA-2014:0285 URL:http://rhn.redhat.com/errata/RHSA-2014-0285.html MISC:RHSA-2015:0284 URL:http://rhn.redhat.com/errata/RHSA-2015-0284.html MISC:[oss-security] 20131030 Re: CVE Request -- Linux kernel: ipc: ipc_rcu_putref refcount races URL:http://www.openwall.com/lists/oss-security/2013/10/30/4 MISC:http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6062a8dc0517bce23e3c2f7d2fea5e22411269a3 URL:http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6062a8dc0517bce23e3c2f7d2fea5e22411269a3 MISC:https://bugzilla.redhat.com/show_bug.cgi?id=1024854 URL:https://bugzilla.redhat.com/show_bug.cgi?id=1024854 MISC:https://github.com/torvalds/linux/commit/6062a8dc0517bce23e3c2f7d2fea5e22411269a3 URL:https://github.com/torvalds/linux/commit/6062a8dc0517bce23e3c2f7d2fea5e22411269a3 MISC:https://www.kernel.org/pub/linux/kernel/v3.x/patch-3.10.bz2 URL:https://www.kernel.org/pub/linux/kernel/v3.x/patch-3.10.bz2 MISC:openSUSE-SU-2014:0247 URL:http://lists.opensuse.org/opensuse-updates/2014-02/msg00045.html
Assigning CNA
Red Hat, Inc.
Date Record Created
20130612	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20130612)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)