Published: 08/07/2013 Updated: 17/01/2023

CVSS v2 Base Score: 7.8 | Impact Score: 6.9 | Exploitability Score: 10

VMScore: 694

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C

net/ceph/auth_none.c in the Linux kernel up to and including 3.10 allows remote malicious users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via an auth_reply message that triggers an attempted build_request operation.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel 3.10
linux linux kernel
canonical ubuntu linux 12.04

Several vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service, information leak or privilege escalation The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2013-1059 Chanam Park reported an issue in the Ceph distributed storage system Remote users can cause a den ...

The bt_sock_recvmsg function in net/bluetooth/af_bluetoothc in the Linux kernel before 39-rc7 does not properly initialize a certain length variable, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call The udf_encode_fh function in fs/udf/nameic in the Linux kerne ...

Several security issues were fixed in the kernel ...

net/ceph/auth_nonec in the Linux kernel through 310 allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via an auth_reply message that triggers an attempted build_request operation ...

CWE-476 https://bugzilla.redhat.com/show_bug.cgi?id=977356 https://bugzilla.redhat.com/attachment.cgi?id=767633&action=diff http://www.openwall.com/lists/oss-security/2013/07/09/7 http://hkpco.kr/advisory/CVE-2013-1059.txt http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00012.html http://lists.opensuse.org/opensuse-security-announce/2013-09/msg00003.html http://lists.opensuse.org/opensuse-security-announce/2013-09/msg00004.html http://www.ubuntu.com/usn/USN-1942-1 http://www.ubuntu.com/usn/USN-1941-1 http://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html https://www.debian.org/security/./dsa-2745 https://nvd.nist.gov https://usn.ubuntu.com/1936-1/https://access.redhat.com/security/cve/cve-2013-1059

CVE-2013-1059

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect