Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2013-2596
HistoryApr 13, 2013 - 12:00 a.m.

CVE-2013-2596

2013-04-1300:00:00
ubuntu.com
ubuntu.com
18

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.009 Low

EPSS

Percentile

82.6%

JSON

Integer overflow in the fb_mmap function in drivers/video/fbmem.c in the
Linux kernel before 3.8.9, as used in a certain Motorola build of Android
4.1.2 and other products, allows local users to create a read-write memory
mapping for the entirety of kernel memory, and consequently gain
privileges, via crafted /dev/graphics/fb0 mmap2 system calls, as
demonstrated by the Motochopper pwn program.

Notes

Author Note
sbeattie requires write access to /dev/fb0 and other devices, which is usually on permitted to root and the video group.

References

Related

f5 2
veracode 5
android 1
cisa_kev 1
attackerkb 2
cve 2
prion 2
debiancve 1
nessus 15
openvas 8
oraclelinux 5
centos 2
redhat 5
thn 1
f5
f5
SOL11353642 - Linux kernel vulnerability CVE-2013-2596
2016-05-26 00:00:00
K11353642 : Linux kernel vulnerability CVE-2013-2596
2016-05-26 00:00:00
veracode
veracode
Information Disclosure
2019-01-15 09:02:18
Denial Of Service (DoS)
2019-05-02 05:27:32
Denial Of Service (DoS)
2019-05-02 05:12:40
android
android
Motochopper
2013-04-08 00:00:00
cisa_kev
cisa_kev
Linux Kernel Integer Overflow Vulnerability
2022-09-15 00:00:00
attackerkb
attackerkb
CVE-2013-2596
2013-04-13 00:00:00
CVE-2013-3051
2013-04-13 00:00:00
cve
cve
CVE-2013-2596
2013-04-13 02:59:00
CVE-2013-3051
2013-04-13 10:56:00
prion
prion
Integer overflow
2013-04-13 02:59:00
Design/Logic Flaw
2013-04-13 10:56:00
debiancve
debiancve
CVE-2013-2596
2013-04-13 02:59:00
nessus
nessus
Scientific Linux Security Update : kernel on SL5.x i386/x86_64 (20160315)
2016-03-16 00:00:00
Oracle Linux 5 : kernel (ELSA-2016-0450)
2016-03-16 00:00:00
CentOS 5 : kernel (CESA-2016:0450)
2016-03-17 00:00:00
openvas
openvas
RedHat Update for kernel RHSA-2016:0450-01
2016-03-16 00:00:00
Oracle: Security Advisory (ELSA-2016-0450)
2016-03-16 00:00:00
Oracle: Security Advisory (ELSA-2016-0450-1)
2016-03-17 00:00:00
oraclelinux
oraclelinux
kernel security update
2016-03-16 00:00:00
kernel security update
2016-03-15 00:00:00
Unbreakable Enterprise kernel Security update
2014-10-17 00:00:00
centos
centos
kernel security update
2016-03-16 14:17:08
kernel, perf, python security update
2014-10-20 18:09:23
redhat
redhat
(RHSA-2016:0450) Important: kernel security update
2016-03-15 00:00:00
(RHSA-2015:0803) Important: kernel security and bug fix update
2015-04-14 00:00:00
(RHSA-2015:0695) Important: kernel security and bug fix update
2015-03-17 00:00:00
thn
thn
Google Detects Android Spyware That Spies On WhatsApp, Skype Calls
2017-11-27 22:29:00

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.009 Low

EPSS

Percentile

82.6%

JSON
Related for UB:CVE-2013-2596
f52veracode5android1cisa_kev1attackerkb2cve2prion2debiancve1nessus15openvas8oraclelinux5centos2redhat5thn1