CVE - CVE-2013-4591

CVE-ID
CVE-2013-4591	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
Buffer overflow in the __nfs4_get_acl_uncached function in fs/nfs/nfs4proc.c in the Linux kernel before 3.7.2 allows local users to cause a denial of service (memory corruption and system crash) or possibly have unspecified other impact via a getxattr system call for the system.nfs4_acl extended attribute of a pathname on an NFSv4 filesystem.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:63791 URL:http://www.securityfocus.com/bid/63791 MISC:RHSA-2013:1645 URL:http://rhn.redhat.com/errata/RHSA-2013-1645.html MISC:RHSA-2014:0284 URL:http://rhn.redhat.com/errata/RHSA-2014-0284.html MISC:[oss-security] 20131118 CVE-2013-4591 -- Linux kernel: kernel: nfs: missing check for buffer length in __nfs4_get_acl_uncached URL:http://www.openwall.com/lists/oss-security/2013/11/18/2 MISC:http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7d3e91a89b7adbc2831334def9e494dd9892f9af URL:http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7d3e91a89b7adbc2831334def9e494dd9892f9af MISC:http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.7.2 URL:http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.7.2 MISC:https://bugzilla.redhat.com/show_bug.cgi?id=1031678 URL:https://bugzilla.redhat.com/show_bug.cgi?id=1031678 MISC:https://github.com/torvalds/linux/commit/7d3e91a89b7adbc2831334def9e494dd9892f9af URL:https://github.com/torvalds/linux/commit/7d3e91a89b7adbc2831334def9e494dd9892f9af
Assigning CNA
Red Hat, Inc.
Date Record Created
20130612	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20130612)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)