CVE-2013-4511
published 2013-11-12CVE-2013-4511: Multiple integer overflows in Alchemy LCD frame-buffer drivers in the Linux kernel before 3.12 allow local users to create a read-write memory mapping for the…
PriorityP425medium6.9CVSS 2.0
AVLACMAuNCCICAC
EPSS
0.60%
45.1th percentile
Multiple integer overflows in Alchemy LCD frame-buffer drivers in the Linux kernel before 3.12 allow local users to create a read-write memory mapping for the entirety of kernel memory, and consequently gain privileges, via crafted mmap operations, related to the (1) au1100fb_fb_mmap function in drivers/video/au1100fb.c and the (2) au1200fb_fb_mmap function in drivers/video/au1200fb.c.
Affected
13 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 3.11.8-1 (bookworm) | linux 3.11.8-1 (bookworm) |
| linux | linux_kernel | < 3.2.53 | 3.2.53 |
| linux | linux_kernel | >= 0 < 3.11.8-1 | 3.11.8-1 |
| linux | linux_kernel | >= 0 < 3.11.8-1 | 3.11.8-1 |
| linux | linux_kernel | >= 0 < 3.11.8-1 | 3.11.8-1 |
| linux | linux_kernel | >= 0 < 3.11.8-1 | 3.11.8-1 |
| linux | linux_kernel | >= 0 < 3.12.0-2.5 | 3.12.0-2.5 |
| linux | linux_kernel | >= 0 < 4.2.0-16.19 | 4.2.0-16.19 |
| linux | linux_kernel | >= 2.6.12 < 3.2.53 | 3.2.53 |
| linux | linux_kernel | >= 3.11 < 3.11.8 | 3.11.8 |
| linux | linux_kernel | >= 3.3 < 3.4.71 | 3.4.71 |
| linux | linux_kernel | >= 3.3 < 3.4.69 | 3.4.69 |
| linux | linux_kernel | >= 3.5 < 3.10.19 | 3.10.19 |
CVSS provenance
nvdv2.06.9MEDIUMAV:L/AC:M/Au:N/C:C/I:C/A:C
osv6.9MEDIUM
vendor_debian6.9MEDIUM
vendor_redhat6.9MEDIUM
vendor_ubuntu6.9MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
Linux kernel vulnerabilities
vendor_ubuntu·2014-01-03·CVSS 6.9
CVE-2013-4470 [MEDIUM] Linux kernel vulnerabilities
Title: Linux kernel vulnerabilities
Summary: Several security issues were fixed in the kernel.
Hannes Frederic Sowa discovered a flaw in the Linux kernel's UDP
Fragmentation Offload (UFO). An unprivileged local user could exploit this
flaw to cause a denial of service (system crash) or possibly gain
administrative privileges. (CVE-2013-4470)
Multiple integer overflow flaws were discovered in the Alchemy LCD frame-
buffer drivers in the Linux kernel. An unprivileged local user could
exploit this flaw to gain administrative privileges. (CVE-2013-4511)
Nico Golde and Fabian Yamaguchi reported a buffer overflow in the Ozmo
Devices USB over WiFi devices. A local user could exploit this flaw to
cause a denial of service or possibly unspecified impact. (CVE-2013-4513)
Nico Golde and Fabian Y
Ubuntu
Linux kernel (Raring HWE) vulnerabilities
vendor_ubuntu·2014-01-03·CVSS 6.9
CVE-2013-4470 [MEDIUM] Linux kernel (Raring HWE) vulnerabilities
Title: Linux kernel (Raring HWE) vulnerabilities
Summary: Several security issues were fixed in the kernel.
Hannes Frederic Sowa discovered a flaw in the Linux kernel's UDP
Fragmentation Offload (UFO). An unprivileged local user could exploit this
flaw to cause a denial of service (system crash) or possibly gain
administrative privileges. (CVE-2013-4470)
Multiple integer overflow flaws were discovered in the Alchemy LCD frame-
buffer drivers in the Linux kernel. An unprivileged local user could
exploit this flaw to gain administrative privileges. (CVE-2013-4511)
Nico Golde and Fabian Yamaguchi reported a buffer overflow in the Ozmo
Devices USB over WiFi devices. A local user could exploit this flaw to
cause a denial of service or possibly unspecified impact. (CVE-2013-4513)
Nico Golde
Ubuntu
Linux kernel (Saucy HWE) vulnerabilities
vendor_ubuntu·2014-01-03·CVSS 3.3
CVE-2013-2929 [LOW] Linux kernel (Saucy HWE) vulnerabilities
Title: Linux kernel (Saucy HWE) vulnerabilities
Summary: Several security issues were fixed in the kernel.
Vasily Kulikov reported a flaw in the Linux kernel's implementation of
ptrace. An unprivileged local user could exploit this flaw to obtain
sensitive information from kernel memory. (CVE-2013-2929)
Dave Jones and Vince Weaver reported a flaw in the Linux kernel's per event
subsystem that allows normal users to enable function tracing. An
unprivileged local user could exploit this flaw to obtain potentially
sensitive information from the kernel. (CVE-2013-2930)
Stephan Mueller reported an error in the Linux kernel's ansi cprng random
number generator. This flaw makes it easier for a local attacker to break
cryptographic protections. (CVE-2013-4345)
Jason Wang discovered a bug in t
Ubuntu
Linux kernel vulnerabilities
vendor_ubuntu·2014-01-03·CVSS 3.6
CVE-2013-2930 [LOW] Linux kernel vulnerabilities
Title: Linux kernel vulnerabilities
Summary: Several security issues were fixed in the kernel.
Dave Jones and Vince Weaver reported a flaw in the Linux kernel's per event
subsystem that allows normal users to enable function tracing. An
unprivileged local user could exploit this flaw to obtain potentially
sensitive information from the kernel. (CVE-2013-2930)
Stephan Mueller reported an error in the Linux kernel's ansi cprng random
number generator. This flaw makes it easier for a local attacker to break
cryptographic protections. (CVE-2013-4345)
Multiple integer overflow flaws were discovered in the Alchemy LCD frame-
buffer drivers in the Linux kernel. An unprivileged local user could
exploit this flaw to gain administrative privileges. (CVE-2013-4511)
Nico Golde and Fabian Yamaguch
Ubuntu
Linux kernel (OMAP4) vulnerabilities
vendor_ubuntu·2014-01-03·CVSS 6.0
CVE-2013-4299 [MEDIUM] Linux kernel (OMAP4) vulnerabilities
Title: Linux kernel (OMAP4) vulnerabilities
Summary: Several security issues were fixed in the kernel.
A flaw was discovered in the Linux kernel's dm snapshot facility. A remote
authenticated user could exploit this flaw to obtain sensitive information
or modify/corrupt data. (CVE-2013-4299)
Hannes Frederic Sowa discovered a flaw in the Linux kernel's UDP
Fragmentation Offload (UFO). An unprivileged local user could exploit this
flaw to cause a denial of service (system crash) or possibly gain
administrative privileges. (CVE-2013-4470)
Multiple integer overflow flaws were discovered in the Alchemy LCD frame-
buffer drivers in the Linux kernel. An unprivileged local user could
exploit this flaw to gain administrative privileges. (CVE-2013-4511)
Nico Golde and Fabian Yamaguchi reported
Ubuntu
Linux kernel vulnerabilities
vendor_ubuntu·2014-01-03·CVSS 3.3
CVE-2013-2929 [LOW] Linux kernel vulnerabilities
Title: Linux kernel vulnerabilities
Summary: Several security issues were fixed in the kernel.
Vasily Kulikov reported a flaw in the Linux kernel's implementation of
ptrace. An unprivileged local user could exploit this flaw to obtain
sensitive information from kernel memory. (CVE-2013-2929)
Dave Jones and Vince Weaver reported a flaw in the Linux kernel's per event
subsystem that allows normal users to enable function tracing. An
unprivileged local user could exploit this flaw to obtain potentially
sensitive information from the kernel. (CVE-2013-2930)
Stephan Mueller reported an error in the Linux kernel's ansi cprng random
number generator. This flaw makes it easier for a local attacker to break
cryptographic protections. (CVE-2013-4345)
Jason Wang discovered a bug in the network f
Ubuntu
Linux kernel (OMAP4) vulnerabilities
vendor_ubuntu·2014-01-03·CVSS 3.6
CVE-2013-2930 [LOW] Linux kernel (OMAP4) vulnerabilities
Title: Linux kernel (OMAP4) vulnerabilities
Summary: Several security issues were fixed in the kernel.
Dave Jones and Vince Weaver reported a flaw in the Linux kernel's per event
subsystem that allows normal users to enable function tracing. An
unprivileged local user could exploit this flaw to obtain potentially
sensitive information from the kernel. (CVE-2013-2930)
Stephan Mueller reported an error in the Linux kernel's ansi cprng random
number generator. This flaw makes it easier for a local attacker to break
cryptographic protections. (CVE-2013-4345)
Multiple integer overflow flaws were discovered in the Alchemy LCD frame-
buffer drivers in the Linux kernel. An unprivileged local user could
exploit this flaw to gain administrative privileges. (CVE-2013-4511)
Nico Golde and Fabian
Ubuntu
Linux kernel (Quantal HWE) vulnerabilities
vendor_ubuntu·2014-01-03·CVSS 3.6
CVE-2013-2930 [LOW] Linux kernel (Quantal HWE) vulnerabilities
Title: Linux kernel (Quantal HWE) vulnerabilities
Summary: Several security issues were fixed in the kernel.
Dave Jones and Vince Weaver reported a flaw in the Linux kernel's per event
subsystem that allows normal users to enable function tracing. An
unprivileged local user could exploit this flaw to obtain potentially
sensitive information from the kernel. (CVE-2013-2930)
Stephan Mueller reported an error in the Linux kernel's ansi cprng random
number generator. This flaw makes it easier for a local attacker to break
cryptographic protections. (CVE-2013-4345)
Jason Wang discovered a bug in the network flow dissector in the Linux
kernel. A remote attacker could exploit this flaw to cause a denial of
service (infinite loop). (CVE-2013-4348)
Multiple integer overflow flaws were discover
Ubuntu
Linux kernel vulnerabilities
vendor_ubuntu·2014-01-03·CVSS 6.0
CVE-2013-4299 [MEDIUM] Linux kernel vulnerabilities
Title: Linux kernel vulnerabilities
Summary: Several security issues were fixed in the kernel.
A flaw was discovered in the Linux kernel's dm snapshot facility. A remote
authenticated user could exploit this flaw to obtain sensitive information
or modify/corrupt data. (CVE-2013-4299)
Hannes Frederic Sowa discovered a flaw in the Linux kernel's UDP
Fragmentation Offload (UFO). An unprivileged local user could exploit this
flaw to cause a denial of service (system crash) or possibly gain
administrative privileges. (CVE-2013-4470)
Multiple integer overflow flaws were discovered in the Alchemy LCD frame-
buffer drivers in the Linux kernel. An unprivileged local user could
exploit this flaw to gain administrative privileges. (CVE-2013-4511)
Nico Golde and Fabian Yamaguchi reported a flaw i
Ubuntu
Linux kernel (EC2) vulnerabilities
vendor_ubuntu·2013-12-03·CVSS 4.9
CVE-2012-2121 [MEDIUM] Linux kernel (EC2) vulnerabilities
Title: Linux kernel (EC2) vulnerabilities
Summary: Several security issues were fixed in the kernel.
A flaw was discovered in the Linux kernel's KVM (kernel virtual machine).
An administrative user in the guest OS could leverage this flaw to cause a
denial of service in the host OS. (CVE-2012-2121)
Multiple integer overflow flaws were discovered in the Alchemy LCD frame-
buffer drivers in the Linux kernel. An unprivileged local user could
exploit this flaw to gain administrative privileges. (CVE-2013-4511)
Instructions: After a standard system update you need to reboot your computer to make
all the necessary changes.
ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompile and
reinstall all third party kernel
Ubuntu
Linux kernel vulnerabilities
vendor_ubuntu·2013-12-03·CVSS 4.9
CVE-2012-2121 [MEDIUM] Linux kernel vulnerabilities
Title: Linux kernel vulnerabilities
Summary: Several security issues were fixed in the kernel.
A flaw was discovered in the Linux kernel's KVM (kernel virtual machine).
An administrative user in the guest OS could leverage this flaw to cause a
denial of service in the host OS. (CVE-2012-2121)
Multiple integer overflow flaws were discovered in the Alchemy LCD frame-
buffer drivers in the Linux kernel. An unprivileged local user could
exploit this flaw to gain administrative privileges. (CVE-2013-4511)
Instructions: After a standard system update you need to reboot your computer to make
all the necessary changes.
ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompile and
reinstall all third party kernel module
Debian
CVE-2013-4511: linux - Multiple integer overflows in Alchemy LCD frame-buffer drivers in the Linux kern...
vendor_debian·2013·CVSS 6.9
CVE-2013-4511 [MEDIUM] CVE-2013-4511: linux - Multiple integer overflows in Alchemy LCD frame-buffer drivers in the Linux kern...
Multiple integer overflows in Alchemy LCD frame-buffer drivers in the Linux kernel before 3.12 allow local users to create a read-write memory mapping for the entirety of kernel memory, and consequently gain privileges, via crafted mmap operations, related to the (1) au1100fb_fb_mmap function in drivers/video/au1100fb.c and the (2) au1200fb_fb_mmap function in drivers/video/au1200fb.c.
Scope: local
bookworm: resolved (fixed in 3.11.8-1)
bullseye: resolved (fixed in 3.11.8-1)
forky: resolved (fixed in 3.11.8-1)
sid: resolved (fixed in 3.11.8-1)
trixie: resolved (fixed in 3.11.8-1)
Red Hat
CVE-2013-4511: Multiple integer overflows in Alchemy LCD frame-buffer drivers in the Linux kernel before 3
vendor_redhat·CVSS 6.9
CVE-2013-4511 [MEDIUM] CVE-2013-4511: Multiple integer overflows in Alchemy LCD frame-buffer drivers in the Linux kernel before 3
Multiple integer overflows in Alchemy LCD frame-buffer drivers in the Linux kernel before 3.12 allow local users to create a read-write memory mapping for the entirety of kernel memory, and consequently gain privileges, via crafted mmap operations, related to the (1) au1100fb_fb_mmap function in drivers/video/au1100fb.c and the (2) au1200fb_fb_mmap function in drivers/video/au1200fb.c.
Statement: Not vulnerable to the issues affecting AMD Au1100 and AMD Au1200 SOCs framebuffer drivers. These issues do not affect the versions of the kernel package as shipped with Red Hat Enterprise Linux 5, 6 and Red Hat Enterprise MRG 2.
Red Hat
CVE-2013-6763: The uio_mmap_physical function in drivers/uio/uio
vendor_redhat·CVSS 6.9
CVE-2013-6763 [MEDIUM] CVE-2013-6763: The uio_mmap_physical function in drivers/uio/uio
The uio_mmap_physical function in drivers/uio/uio.c in the Linux kernel before 3.12 does not validate the size of a memory block, which allows local users to cause a denial of service (memory corruption) or possibly gain privileges via crafted mmap operations, a different vulnerability than CVE-2013-4511.
Statement: The Red Hat Security Response Team does not consider this issue to be a security flaw; however, we are in the process of discussing the issue with other vendors. We will revisit our decision not to classify this issue as a security flaw if needed.
GHSA
GHSA-683g-4vqr-5fqc: The uio_mmap_physical function in drivers/uio/uio
ghsa_unreviewed·2022-05-17·CVSS 6.9
CVE-2013-6763 [MEDIUM] CWE-119 GHSA-683g-4vqr-5fqc: The uio_mmap_physical function in drivers/uio/uio
The uio_mmap_physical function in drivers/uio/uio.c in the Linux kernel before 3.12 does not validate the size of a memory block, which allows local users to cause a denial of service (memory corruption) or possibly gain privileges via crafted mmap operations, a different vulnerability than CVE-2013-4511.
GHSA
GHSA-vrr5-8xm6-9mjx: Multiple integer overflows in Alchemy LCD frame-buffer drivers in the Linux kernel before 3
ghsa_unreviewed·2022-05-17
CVE-2013-4511 [MEDIUM] GHSA-vrr5-8xm6-9mjx: Multiple integer overflows in Alchemy LCD frame-buffer drivers in the Linux kernel before 3
Multiple integer overflows in Alchemy LCD frame-buffer drivers in the Linux kernel before 3.12 allow local users to create a read-write memory mapping for the entirety of kernel memory, and consequently gain privileges, via crafted mmap operations, related to the (1) au1100fb_fb_mmap function in drivers/video/au1100fb.c and the (2) au1200fb_fb_mmap function in drivers/video/au1200fb.c.
OSV
CVE-2013-6763: The uio_mmap_physical function in drivers/uio/uio
osv·2013-11-12·CVSS 6.9
CVE-2013-6763 [MEDIUM] CVE-2013-6763: The uio_mmap_physical function in drivers/uio/uio
The uio_mmap_physical function in drivers/uio/uio.c in the Linux kernel before 3.12 does not validate the size of a memory block, which allows local users to cause a denial of service (memory corruption) or possibly gain privileges via crafted mmap operations, a different vulnerability than CVE-2013-4511.
OSV
CVE-2013-4511: Multiple integer overflows in Alchemy LCD frame-buffer drivers in the Linux kernel before 3
osv·2013-11-12·CVSS 6.9
CVE-2013-4511 [MEDIUM] CVE-2013-4511: Multiple integer overflows in Alchemy LCD frame-buffer drivers in the Linux kernel before 3
Multiple integer overflows in Alchemy LCD frame-buffer drivers in the Linux kernel before 3.12 allow local users to create a read-write memory mapping for the entirety of kernel memory, and consequently gain privileges, via crafted mmap operations, related to the (1) au1100fb_fb_mmap function in drivers/video/au1100fb.c and the (2) au1200fb_fb_mmap function in drivers/video/au1200fb.c.
No detection rules found.
No public exploits indexed.
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7314e613d5ff9f0934f7a0f74ed7973b903315d1http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00002.htmlhttp://lists.opensuse.org/opensuse-security-announce/2014-02/msg00003.htmlhttp://lists.opensuse.org/opensuse-updates/2014-02/msg00045.htmlhttp://www.openwall.com/lists/oss-security/2013/11/04/22http://www.ubuntu.com/usn/USN-2036-1http://www.ubuntu.com/usn/USN-2037-1http://www.ubuntu.com/usn/USN-2066-1http://www.ubuntu.com/usn/USN-2067-1http://www.ubuntu.com/usn/USN-2068-1http://www.ubuntu.com/usn/USN-2069-1http://www.ubuntu.com/usn/USN-2070-1http://www.ubuntu.com/usn/USN-2071-1http://www.ubuntu.com/usn/USN-2072-1http://www.ubuntu.com/usn/USN-2073-1http://www.ubuntu.com/usn/USN-2074-1http://www.ubuntu.com/usn/USN-2075-1http://www.ubuntu.com/usn/USN-2076-1https://github.com/torvalds/linux/commit/7314e613d5ff9f0934f7a0f74ed7973b903315d1https://www.kernel.org/pub/linux/kernel/v3.x/patch-3.12.bz2http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7314e613d5ff9f0934f7a0f74ed7973b903315d1http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00002.htmlhttp://lists.opensuse.org/opensuse-security-announce/2014-02/msg00003.htmlhttp://lists.opensuse.org/opensuse-updates/2014-02/msg00045.htmlhttp://www.openwall.com/lists/oss-security/2013/11/04/22http://www.ubuntu.com/usn/USN-2036-1http://www.ubuntu.com/usn/USN-2037-1http://www.ubuntu.com/usn/USN-2066-1http://www.ubuntu.com/usn/USN-2067-1http://www.ubuntu.com/usn/USN-2068-1http://www.ubuntu.com/usn/USN-2069-1http://www.ubuntu.com/usn/USN-2070-1http://www.ubuntu.com/usn/USN-2071-1http://www.ubuntu.com/usn/USN-2072-1http://www.ubuntu.com/usn/USN-2073-1http://www.ubuntu.com/usn/USN-2074-1http://www.ubuntu.com/usn/USN-2075-1http://www.ubuntu.com/usn/USN-2076-1https://github.com/torvalds/linux/commit/7314e613d5ff9f0934f7a0f74ed7973b903315d1https://www.kernel.org/pub/linux/kernel/v3.x/patch-3.12.bz2
2013-11-12
Published