Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).
CVE-2013-1773 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Kernel
CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer13 documents9 sources
Severity
6.2MEDIUMNVD
EPSS
0.3%
top 51.46%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
Timeline
PublishedFeb 28
Latest updateMay 13
Description
Buffer overflow in the VFAT filesystem implementation in the Linux kernel before 3.3 allows local users to gain privileges or cause a denial of service (system crash) via a VFAT write operation on a filesystem with the utf8 mount option, which is not properly handled during UTF-8 to UTF-16 conversion.
CVSS vector
AV:L/AC:H/C:C/I:C/A:CExploitability: 1.9 | Impact: 10.0
Affected Packages3 packages
Also affects: Enterprise Linux 6.0
🔴Vulnerability Details
3GHSA▶
GHSA-wrp6-2w63-vpc4: Buffer overflow in the VFAT filesystem implementation in the Linux kernel before 3↗2022-05-13
OSV▶
CVE-2013-1773: Buffer overflow in the VFAT filesystem implementation in the Linux kernel before 3↗2013-02-28
CVEList▶
CVE-2013-1773: Buffer overflow in the VFAT filesystem implementation in the Linux kernel before 3↗2013-02-28