CVE - CVE-2013-6382

CVE-ID
CVE-2013-6382	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
Multiple buffer underflows in the XFS implementation in the Linux kernel through 3.12.1 allow local users to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging the CAP_SYS_ADMIN capability for a (1) XFS_IOC_ATTRLIST_BY_HANDLE or (2) XFS_IOC_ATTRLIST_BY_HANDLE_32 ioctl call with a crafted length value, related to the xfs_attrlist_by_handle function in fs/xfs/xfs_ioctl.c and the xfs_compat_attrlist_by_handle function in fs/xfs/xfs_ioctl32.c.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:63889 URL:http://www.securityfocus.com/bid/63889 MISC:USN-2109-1 URL:http://www.ubuntu.com/usn/USN-2109-1 MISC:USN-2110-1 URL:http://www.ubuntu.com/usn/USN-2110-1 MISC:USN-2113-1 URL:http://www.ubuntu.com/usn/USN-2113-1 MISC:USN-2117-1 URL:http://www.ubuntu.com/usn/USN-2117-1 MISC:USN-2128-1 URL:http://www.ubuntu.com/usn/USN-2128-1 MISC:USN-2129-1 URL:http://www.ubuntu.com/usn/USN-2129-1 MISC:USN-2135-1 URL:http://www.ubuntu.com/usn/USN-2135-1 MISC:USN-2138-1 URL:http://www.ubuntu.com/usn/USN-2138-1 MISC:USN-2139-1 URL:http://www.ubuntu.com/usn/USN-2139-1 MISC:USN-2141-1 URL:http://www.ubuntu.com/usn/USN-2141-1 MISC:USN-2158-1 URL:http://www.ubuntu.com/usn/USN-2158-1 MISC:[oss-security] 20131122 Linux kernel CVE fixes URL:http://www.openwall.com/lists/oss-security/2013/11/22/5 MISC:[xfs] 20131031 [patch] xfs: underflow bug in xfs_attrlist_by_handle() URL:http://www.spinics.net/lists/xfs/msg23343.html MISC:https://bugzilla.redhat.com/show_bug.cgi?id=1033603 URL:https://bugzilla.redhat.com/show_bug.cgi?id=1033603
Assigning CNA
Red Hat, Inc.
Date Record Created
20131104	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20131104)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)