SB2013032206 - Use-after-free in Linux kernel

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2013032206

SB2013032206 - Use-after-free in Linux kernel

Published: March 22, 2013 Updated: August 11, 2020

Security Bulletin ID SB2013032206
Severity
Medium
Patch available
NO
Number of vulnerabilities 1
Exploitation vector Adjecent network
Highest impact Code execution

Breakdown by Severity

Medium 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 security vulnerability.


1) Use-after-free (CVE-ID: CVE-2013-1797)

The vulnerability allows a remote attacker to compromise vulnerable system.

The vulnerability exists due to a use-after-free error when processing a crafted application that triggers use of a guest physical address (GPA) in (1) movable or (2) removable memory during an MSR_KVM_SYSTEM_TIME kvm_set_msr_common operation. A guest OS users can cause a denial of service (host OS memory corruption) or possibly have unspecified other impact.

Successful exploitation of the vulnerability may allow an attacker to compromise vulnerable system.


Remediation

Cybersecurity Help is not aware of any official remediation provided by the vendor.

References