Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2013-6282
HistoryNov 20, 2013 - 1:19 p.m.

CVE-2013-6282

2013-11-2013:19:43
Debian Security Bug Tracker
security-tracker.debian.org
26

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS

0.024

Percentile

89.9%

The (1) get_user and (2) put_user API functions in the Linux kernel before 3.5.5 on the v6k and v7 ARM platforms do not validate certain addresses, which allows attackers to read or modify the contents of arbitrary kernel memory locations via a crafted application, as exploited in the wild against Android devices in October and November 2013.

OSVersionArchitecturePackageVersionFilename
Debian12alllinux< 3.6.4-1~experimental.1linux_3.6.4-1~experimental.1_all.deb
Debian11alllinux< 3.6.4-1~experimental.1linux_3.6.4-1~experimental.1_all.deb
Debian999alllinux< 3.6.4-1~experimental.1linux_3.6.4-1~experimental.1_all.deb
Debian13alllinux< 3.6.4-1~experimental.1linux_3.6.4-1~experimental.1_all.deb

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS

0.024

Percentile

89.9%