Lucene search

K
nvd[email protected]NVD:CVE-2013-6763
HistoryNov 12, 2013 - 2:35 p.m.

CVE-2013-6763

2013-11-1214:35:12
CWE-119
web.nvd.nist.gov
1

6.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

6.8 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

16.2%

The uio_mmap_physical function in drivers/uio/uio.c in the Linux kernel before 3.12 does not validate the size of a memory block, which allows local users to cause a denial of service (memory corruption) or possibly gain privileges via crafted mmap operations, a different vulnerability than CVE-2013-4511.

Affected configurations

NVD
Node
linuxlinux_kernelRange<3.2.53
OR
linuxlinux_kernelRange3.33.4.71
OR
linuxlinux_kernelRange3.53.10.19
OR
linuxlinux_kernelRange3.113.11.8

6.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

6.8 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

16.2%