Debian Security Bug TrackerDEBIANCVE:CVE-2013-6380CVE-2013-6380
4.7 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:N/I:N/A:C
0.0004 Low
EPSS
Percentile
9.5%
The aac_send_raw_srb function in drivers/scsi/aacraid/commctrl.c in the Linux kernel through 3.12.1 does not properly validate a certain size value, which allows local users to cause a denial of service (invalid pointer dereference) or possibly have unspecified other impact via an FSACTL_SEND_RAW_SRB ioctl call that triggers a crafted SRB command.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | linux | < 3.11.10-1 | linux_3.11.10-1_all.deb |
| Debian | 11 | all | linux | < 3.11.10-1 | linux_3.11.10-1_all.deb |
| Debian | 10 | all | linux | < 3.11.10-1 | linux_3.11.10-1_all.deb |
| Debian | 999 | all | linux | < 3.11.10-1 | linux_3.11.10-1_all.deb |
| Debian | 13 | all | linux | < 3.11.10-1 | linux_3.11.10-1_all.deb |
Related
4.7 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:N/I:N/A:C
0.0004 Low
EPSS
Percentile
9.5%