NetSight
IP …
low3.6

CVE-2013-0914

The flush_signal_handlers function in kernel/signal.c in the Linux kernel before 3.8.4 preserves the value of the sa_restorer field across an exec operation, w…

Impact

The flush_signal_handlers function in kernel/signal.c in the Linux kernel before 3.8.4 preserves the value of the sa_restorer field across an exec operation, which makes it easier for local users to bypass the ASLR protection mechanism via a crafted application containing a sigaction system call.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
through 3.8.3
Versions 3.8.0, 3.8.1, 3.8.2

Weakness classification

CWE-264

References