CVE-2013-0914

Published: Mar 22, 2013Modified: Apr 29, 2026

3.6

Vector

AV:L/AC:L/Au:N/C:P/I:P/A:N

Exploitability: 3.9 / Impact: 4.9

Source: NVD

Description

The flush_signal_handlers function in kernel/signal.c in the Linux kernel before 3.8.4 preserves the value of the sa_restorer field across an exec operation, which makes it easier for local users to bypass the ASLR protection mechanism via a crafted application containing a sigaction system call.

Affected (4)

Products: Linux: Linux Kernel

1 product

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Up to 3.8.3
Linux Linux Kernel	Version 3.8.0
Linux Linux Kernel	Version 3.8.1
Linux Linux Kernel	Version 3.8.2

Related CWEs

References (36)

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=2ca39528c01a933f6689cd6505ce65bd6d68a530

Source: chrome-cve-admin@google.com

http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00018.html

Source: chrome-cve-admin@google.com

http://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html

Source: chrome-cve-admin@google.com

http://rhn.redhat.com/errata/RHSA-2013-1051.html

Source: chrome-cve-admin@google.com

http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.8.4

Source: chrome-cve-admin@google.com

http://www.mandriva.com/security/advisories?name=MDVSA-2013:176

Source: chrome-cve-admin@google.com

http://www.openwall.com/lists/oss-security/2013/03/11/8

Source: chrome-cve-admin@google.com

http://www.ubuntu.com/usn/USN-1787-1

Source: chrome-cve-admin@google.com

http://www.ubuntu.com/usn/USN-1788-1

Source: chrome-cve-admin@google.com

http://www.ubuntu.com/usn/USN-1792-1

Source: chrome-cve-admin@google.com

http://www.ubuntu.com/usn/USN-1793-1

Source: chrome-cve-admin@google.com

http://www.ubuntu.com/usn/USN-1794-1

Source: chrome-cve-admin@google.com

http://www.ubuntu.com/usn/USN-1795-1

Source: chrome-cve-admin@google.com

http://www.ubuntu.com/usn/USN-1796-1

Source: chrome-cve-admin@google.com

http://www.ubuntu.com/usn/USN-1797-1

Source: chrome-cve-admin@google.com

http://www.ubuntu.com/usn/USN-1798-1

Source: chrome-cve-admin@google.com

https://bugzilla.redhat.com/show_bug.cgi?id=920499

Source: chrome-cve-admin@google.com

https://github.com/torvalds/linux/commit/2ca39528c01a933f6689cd6505ce65bd6d68a530

Source: chrome-cve-admin@google.com

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=2ca39528c01a933f6689cd6505ce65bd6d68a530

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00018.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2013-1051.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.8.4

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2013:176

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2013/03/11/8

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-1787-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-1788-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-1792-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-1793-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-1794-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-1795-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-1796-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-1797-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-1798-1

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/show_bug.cgi?id=920499

Source: af854a3a-2127-422b-91ae-364da2661108

https://github.com/torvalds/linux/commit/2ca39528c01a933f6689cd6505ce65bd6d68a530

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.