CVE-2013-2596

Linux Kernel Integer Overflow Vulnerability

Linux Kernel

Integer overflow in the fb_mmap function in drivers/video/fbmem.c in the Linux kernel before 3.8.9, as used in a certain Motorola build of Android 4.1.2 and other products, allows local users to create a read-write memory mapping for the entirety of kernel memory, and consequently gain privileges, via crafted /dev/graphics/fb0 mmap2 system calls, as demonstrated by the Motochopper pwn program.

13. Apr 2013

Ausgewertete Quellen

• Red Hat
  http://rhn.redhat.com/errata/RHSA-2015-0695.html
• Red Hat
  http://rhn.redhat.com/errata/RHSA-2015-0782.html
• Red Hat
  http://rhn.redhat.com/errata/RHSA-2015-0803.html
• Hinweis
  http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10761
• Hinweis
  http://marc.info/?l=linux-kernel&m=136616837923938&w=2
• Hinweis
  http://www.droid-life.com/2013/04/09/root-method-released-for-droid-razr-hd-running-android-4-1-2-other-devices-too/
• Hinweis
  http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
• Hinweis
  http://www.securityfocus.com/bid/59264
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2013-2596
• CISA
  Linux Kernel Integer Overflow Vulnerability
• NVD
  CVE-2013-2596