CVE-2013-1848

Published: Mar 22, 2013Modified: Apr 29, 2026

6.2

Vector

AV:L/AC:H/Au:N/C:C/I:C/A:C

Exploitability: 1.9 / Impact: 10.0

Source: NVD

Description

fs/ext3/super.c in the Linux kernel before 3.8.4 uses incorrect arguments to functions in certain circumstances related to printk input, which allows local users to conduct format-string attacks and possibly gain privileges via a crafted application.

Affected (4)

Products: Linux: Linux Kernel

1 product

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Up to 3.8.3
Linux Linux Kernel	Version 3.8.0
Linux Linux Kernel	Version 3.8.1
Linux Linux Kernel	Version 3.8.2

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (30)

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8d0c2d10dd72c5292eda7a06231056a4c972e4cc

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2013-0928.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2013-1026.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2013-1051.html

Source: secalert@redhat.com

http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.8.4

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDVSA-2013:176

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2013/03/20/8

Source: secalert@redhat.com

http://www.ubuntu.com/usn/USN-1809-1

Source: secalert@redhat.com

http://www.ubuntu.com/usn/USN-1811-1

Source: secalert@redhat.com

http://www.ubuntu.com/usn/USN-1812-1

Source: secalert@redhat.com

http://www.ubuntu.com/usn/USN-1813-1

Source: secalert@redhat.com

http://www.ubuntu.com/usn/USN-1814-1

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=920783

Source: secalert@redhat.com

https://github.com/torvalds/linux/commit/8d0c2d10dd72c5292eda7a06231056a4c972e4cc

Source: secalert@redhat.com

ExploitPatch

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8d0c2d10dd72c5292eda7a06231056a4c972e4cc

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2013-0928.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2013-1026.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2013-1051.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.8.4

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2013:176

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2013/03/20/8

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-1809-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-1811-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-1812-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-1813-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-1814-1

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/show_bug.cgi?id=920783

Source: af854a3a-2127-422b-91ae-364da2661108

https://github.com/torvalds/linux/commit/8d0c2d10dd72c5292eda7a06231056a4c972e4cc

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatch

Timeline

No history available yet.