Lucene search
RootSSV:60825HistoryJun 03, 2013 - 12:00 a.m.
Linux Kernel "iscsi_add_notunderstood_response()"缓冲区溢出漏洞
2013-06-0300:00:00
Root
www.seebug.org
24
0.033 Low
EPSS
Percentile
90.3%
CVE ID: CVE-2013-2850
Linux Kernel是一款开源的操作系统。
Linux iSCSI子系统存在一个基于堆的缓冲区溢出，允许远程攻击者利用漏洞发送特制请求获得内核执行控制。
在处理超大key时"iscsi_add_notunderstood_response()"函数(drivers/target/iscsi/iscsi_target_parameters.c)存在一个边界错误，允许攻击者发送超过64字节的KEY触发漏洞，可以以应用程序上下文执行任意代码。
要成功利用漏洞需要配置了iSCSI target并监听网络。
0
Linux Kernel 3.0.x
Linux Kernel 3.2.x
Linux Kernel 3.4.x
Linux Kernel 3.9.x
厂商解决方案
用户可参考如下厂商提供的安全公告获得补丁信息：
http://git.kernel.org/cgit/linux/kernel/git/nab/target-pending.git/commit/?id=cea4dcfdad926a27a18e188720efe0f2c9403456
Related
suse
suse
kernel (critical)
2013-06-13 10:04:11
Security update for Linux kernel (critical)
2013-05-31 15:04:12
kernel (critical)
2013-06-19 11:05:52
fedora
fedora
[SECURITY] Fedora 19 Update: kernel-3.9.4-301.fc19
2013-06-07 04:33:21
[SECURITY] Fedora 18 Update: kernel-3.9.5-201.fc18
2013-06-13 06:05:52
[SECURITY] Fedora 18 Update: kernel-3.9.9-201.fc18
2013-07-12 03:11:58
nessus
nessus
openSUSE Security Update : kernel (openSUSE-SU-2013:1005-1)
2014-06-13 00:00:00
Ubuntu 12.04 LTS : linux-lts-quantal vulnerability (USN-1845-1)
2013-05-31 00:00:00
Fedora 19 : kernel-3.9.4-301.fc19 (2013-10050)
2013-07-12 00:00:00
openvas
openvas
Ubuntu Update for linux USN-1844-1
2013-05-31 00:00:00
Ubuntu Update for linux-lts-quantal USN-1845-1
2013-05-31 00:00:00
Ubuntu: Security Advisory (USN-1846-1)
2013-05-31 00:00:00
securityvulns
securityvulns
[USN-1844-1] Linux kernel vulnerability
2013-06-03 00:00:00
[ MDVSA-2013:194 ] kernel
2013-07-15 00:00:00
Linux kernel security vulnerabilities
2013-07-15 00:00:00
ubuntu
ubuntu
Linux kernel vulnerability
2013-05-30 00:00:00
Linux kernel vulnerability
2013-05-30 00:00:00
Linux kernel (Quantal HWE) vulnerability
2013-05-30 00:00:00
debiancve
debiancve
CVE-2013-2850
2013-06-07 14:03:00
checkpoint_advisories
checkpoint_advisories
prion
prion
Heap overflow
2013-06-07 14:03:00
ubuntucve
ubuntucve
CVE-2013-2850
2013-05-30 00:00:00
cve
cve
CVE-2013-2850
2013-06-07 14:03:00
mageia
mageia
Updated kernel-linus package fixes security issues
2013-07-16 11:32:10
Updated kernel-linus package fixes multiple security vulnerabilities
2013-07-16 12:05:14
Updated kernel packages fix multiple security vulnerabilities
2013-07-09 21:56:42
redhat
redhat
(RHSA-2013:1264) Important: kernel-rt security and bug fix update
2013-09-16 00:00:00
veracode
veracode
Information Disclosure
2019-05-02 04:52:18
Denial Of Service (DoS)
2019-05-02 04:52:18
Denial Of Service (DoS)
2019-05-02 04:52:19
oraclelinux
oraclelinux