NetSight
IP …
high7.2Public exploit code

CVE-2013-3301

The ftrace implementation in the Linux kernel before 3.8.8 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possi…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

The ftrace implementation in the Linux kernel before 3.8.8 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by leveraging the CAP_SYS_ADMIN capability for write access to the (1) set_ftrace_pid or (2) set_graph_function file, and then making an lseek system call.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 3.1 before 3.2.44
from 3.3 before 3.4.49
from 3.5 before 3.8.8
RedhatEnterprise Linux
Version 6.0
RedhatEnterprise Mrg
Version 2.0
SuseLinux Enterprise Desktop
Version 11
SuseLinux Enterprise High Availability Extension
Version 11
SuseLinux Enterprise Server
Version 11

References