Lucene search

K
ubuntucveUbuntu.comUB:CVE-2013-1772
HistoryFeb 28, 2013 - 12:00 a.m.

CVE-2013-1772

2013-02-2800:00:00
ubuntu.com
ubuntu.com
10

0.0004 Low

EPSS

Percentile

5.2%

The log_prefix function in kernel/printk.c in the Linux kernel 3.x before
3.4.33 does not properly remove a prefix string from a syslog header, which
allows local users to cause a denial of service (buffer overflow and system
crash) by leveraging /dev/kmsg write access and triggering a
call_console_drivers function call.

Bugs

Notes

Author Note
mdeslaur /dev/kmsg is root-writable only
OSVersionArchitecturePackageVersionFilename
ubuntu12.04noarchlinux< 3.2.0-39.62UNKNOWN
ubuntu12.04noarchlinux-armadaxp< 3.2.0-1615.23UNKNOWN
ubuntu12.04noarchlinux-ti-omap4< 3.2.0-1427.36UNKNOWN