CVE-2013-2851

Published: Jun 7, 2013Modified: Apr 29, 2026

6.0

Vector

AV:L/AC:H/Au:S/C:C/I:C/A:C

Exploitability: 1.5 / Impact: 10.0

Source: NVD

Description

Format string vulnerability in the register_disk function in block/genhd.c in the Linux kernel through 3.9.4 allows local users to gain privileges by leveraging root access and writing format string specifiers to /sys/module/md_mod/parameters/new_array in order to create a crafted /dev/md device name.

Affected (12)

Products: Linux: Linux Kernel

1 product

Configuration A

12 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Up to 3.9.4
Linux Linux Kernel	Version 3.9.0
Linux Linux Kernel	Version 3.9.1
Linux Linux Kernel	Version 3.9.2
Linux Linux Kernel	Version 3.9.3
Linux Linux Kernel	Version 3.9 rc1
Linux Linux Kernel	Version 3.9 rc2
Linux Linux Kernel	Version 3.9 rc3
Linux Linux Kernel	Version 3.9 rc4
Linux Linux Kernel	Version 3.9 rc5
Linux Linux Kernel	Version 3.9 rc6
Linux Linux Kernel	Version 3.9 rc7

Related CWEs

Use of Externally-Controlled Format String

The product uses a function that accepts a format string as an argument, but the format string originates from an external source.

References (28)

http://lists.opensuse.org/opensuse-security-announce/2013-09/msg00003.html

Source: chrome-cve-admin@google.com

http://lists.opensuse.org/opensuse-security-announce/2013-09/msg00004.html

Source: chrome-cve-admin@google.com

http://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html

Source: chrome-cve-admin@google.com

http://marc.info/?l=linux-kernel&m=137055204522556&w=2

Source: chrome-cve-admin@google.com

http://rhn.redhat.com/errata/RHSA-2013-1645.html

Source: chrome-cve-admin@google.com

http://rhn.redhat.com/errata/RHSA-2013-1783.html

Source: chrome-cve-admin@google.com

http://rhn.redhat.com/errata/RHSA-2014-0284.html

Source: chrome-cve-admin@google.com

http://www.debian.org/security/2013/dsa-2766

Source: chrome-cve-admin@google.com

http://www.openwall.com/lists/oss-security/2013/06/06/13

Source: chrome-cve-admin@google.com

http://www.ubuntu.com/usn/USN-1912-1

Source: chrome-cve-admin@google.com

http://www.ubuntu.com/usn/USN-1913-1

Source: chrome-cve-admin@google.com

http://www.ubuntu.com/usn/USN-1941-1

Source: chrome-cve-admin@google.com

http://www.ubuntu.com/usn/USN-1942-1

Source: chrome-cve-admin@google.com

https://bugzilla.redhat.com/show_bug.cgi?id=969515

Source: chrome-cve-admin@google.com

http://lists.opensuse.org/opensuse-security-announce/2013-09/msg00003.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2013-09/msg00004.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://marc.info/?l=linux-kernel&m=137055204522556&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2013-1645.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2013-1783.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2014-0284.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2013/dsa-2766

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2013/06/06/13

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-1912-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-1913-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-1941-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-1942-1

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/show_bug.cgi?id=969515

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.