CVE-2013-0871
Priority
High
Description
Race condition in the ptrace functionality in the Linux kernel before 3.7.5
allows local users to gain privileges via a PTRACE_SETREGS ptrace system
call in a crafted application, as demonstrated by ptrace_death.
allows local users to gain privileges via a PTRACE_SETREGS ptrace system
call in a crafted application, as demonstrated by ptrace_death.
Ubuntu-Description
Suleiman Souhlal, Salman Qazi, Aaron Durbin and Michael Davidson discovered
a race condition in the Linux kernel's ptrace syscall. An unprivileged
local attacker could exploit this flaw to run programs as an administrator.
a race condition in the Linux kernel's ptrace syscall. An unprivileged
local attacker could exploit this flaw to run programs as an administrator.
References
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0871
http://www.openwall.com/lists/oss-security/2013/02/15/16
http://www.ubuntu.com/usn/usn-1736-1
http://www.ubuntu.com/usn/usn-1737-1
http://www.ubuntu.com/usn/usn-1738-1
http://www.ubuntu.com/usn/usn-1739-1
http://www.ubuntu.com/usn/usn-1740-1
http://www.ubuntu.com/usn/usn-1741-1
http://www.ubuntu.com/usn/usn-1742-1
http://www.ubuntu.com/usn/usn-1743-1
http://www.ubuntu.com/usn/usn-1744-1
http://www.ubuntu.com/usn/usn-1745-1
http://www.openwall.com/lists/oss-security/2013/02/15/16
http://www.ubuntu.com/usn/usn-1736-1
http://www.ubuntu.com/usn/usn-1737-1
http://www.ubuntu.com/usn/usn-1738-1
http://www.ubuntu.com/usn/usn-1739-1
http://www.ubuntu.com/usn/usn-1740-1
http://www.ubuntu.com/usn/usn-1741-1
http://www.ubuntu.com/usn/usn-1742-1
http://www.ubuntu.com/usn/usn-1743-1
http://www.ubuntu.com/usn/usn-1744-1
http://www.ubuntu.com/usn/usn-1745-1
Package
| Upstream: | released (3.8~rc5) |
| Ubuntu 10.04 LTS (Lucid Lynx): | DNE |
| Ubuntu 12.04 LTS (Precise Pangolin): | released (3.2.0-1615.22) |
| Ubuntu 12.10 (Quantal Quetzal): | released (3.5.0-1609.12) |
| Ubuntu 13.04 (Raring Ringtail): | DNE |
| Ubuntu 13.10 (Saucy Salamander): | DNE |
Package
| Upstream: | released (3.8~rc5) |
| Ubuntu 10.04 LTS (Lucid Lynx): | released (2.6.32-350.61) |
| Ubuntu 12.04 LTS (Precise Pangolin): | DNE |
| Ubuntu 12.10 (Quantal Quetzal): | DNE |
| Ubuntu 13.04 (Raring Ringtail): | DNE |
| Ubuntu 13.10 (Saucy Salamander): | DNE |
Package
| Upstream: | released (3.8~rc5) |
| Ubuntu 10.04 LTS (Lucid Lynx): | released (3.0.0-31.49~lucid1) |
| Ubuntu 12.04 LTS (Precise Pangolin): | DNE |
| Ubuntu 12.10 (Quantal Quetzal): | DNE |
| Ubuntu 13.04 (Raring Ringtail): | DNE |
| Ubuntu 13.10 (Saucy Salamander): | DNE |
Package
| Upstream: | released (3.8~rc5) |
| Ubuntu 10.04 LTS (Lucid Lynx): | DNE |
| Ubuntu 12.04 LTS (Precise Pangolin): | ignored (abandoned) |
| Ubuntu 12.10 (Quantal Quetzal): | ignored (abandoned) |
| Ubuntu 13.04 (Raring Ringtail): | DNE |
| Ubuntu 13.10 (Saucy Salamander): | DNE |
Package
| Upstream: | released (3.8~rc5) |
| Ubuntu 10.04 LTS (Lucid Lynx): | DNE |
| Ubuntu 12.04 LTS (Precise Pangolin): | ignored (abandoned) |
| Ubuntu 12.10 (Quantal Quetzal): | ignored (abandoned) |
| Ubuntu 13.04 (Raring Ringtail): | DNE |
| Ubuntu 13.10 (Saucy Salamander): | DNE |
Package
| Upstream: | released (3.8~rc5) |
| Ubuntu 10.04 LTS (Lucid Lynx): | ignored (abandoned) |
| Ubuntu 12.04 LTS (Precise Pangolin): | ignored (abandoned) |
| Ubuntu 12.10 (Quantal Quetzal): | ignored (abandoned) |
| Ubuntu 13.04 (Raring Ringtail): | DNE |
| Ubuntu 13.10 (Saucy Salamander): | DNE |
Package
| Upstream: | released (3.8~rc5) |
| Ubuntu 10.04 LTS (Lucid Lynx): | DNE |
| Ubuntu 12.04 LTS (Precise Pangolin): | released (3.5.0-25.38~precise1) |
| Ubuntu 12.10 (Quantal Quetzal): | DNE |
| Ubuntu 13.04 (Raring Ringtail): | DNE |
| Ubuntu 13.10 (Saucy Salamander): | DNE |
Patches:
Package
| Upstream: | released (3.8~rc5) |
| Ubuntu 10.04 LTS (Lucid Lynx): | ignored (reached end-of-life) |
| Ubuntu 12.04 LTS (Precise Pangolin): | DNE |
| Ubuntu 12.10 (Quantal Quetzal): | DNE |
| Ubuntu 13.04 (Raring Ringtail): | DNE |
| Ubuntu 13.10 (Saucy Salamander): | DNE |
Package
| Upstream: | released (3.8~rc5) |
| Ubuntu 10.04 LTS (Lucid Lynx): | ignored (reached end-of-life) |
| Ubuntu 12.04 LTS (Precise Pangolin): | DNE |
| Ubuntu 12.10 (Quantal Quetzal): | DNE |
| Ubuntu 13.04 (Raring Ringtail): | DNE |
| Ubuntu 13.10 (Saucy Salamander): | DNE |
Package
| Upstream: | released (3.8~rc5) |
| Ubuntu 10.04 LTS (Lucid Lynx): | released (2.6.32-45.104) |
| Ubuntu 12.04 LTS (Precise Pangolin): | released (3.2.0-38.61) |
| Ubuntu 12.10 (Quantal Quetzal): | released (3.5.0-25.38) |
| Ubuntu 13.04 (Raring Ringtail): | not-affected (3.8.0-3.7) |
| Ubuntu 13.10 (Saucy Salamander): | not-affected (3.8.0-3.7) |
Patches:
| Introduced by 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 | Fixed by 910ffdb18a6408e14febbb6e4b6840fd2c928c82 |
| Introduced by 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 | Fixed by 9899d11f654474d2d54ea52ceaa2a1f4db3abd68 |
| Introduced by 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 | Fixed by 9067ac85d533651b98c2ff903182a20cbb361fcb |
Package
| Upstream: | released (3.8~rc5) |
| Ubuntu 10.04 LTS (Lucid Lynx): | DNE |
| Ubuntu 12.04 LTS (Precise Pangolin): | released (3.2.0-1426.35) |
| Ubuntu 12.10 (Quantal Quetzal): | released (3.5.0-220.28) |
| Ubuntu 13.04 (Raring Ringtail): | not-affected (3.5.0-220.28) |
| Ubuntu 13.10 (Saucy Salamander): | not-affected (3.5.0-220.28) |
Package
| Upstream: | released (3.8~rc5) |
| Ubuntu 10.04 LTS (Lucid Lynx): | DNE |
| Ubuntu 12.04 LTS (Precise Pangolin): | ignored (abandoned) |
| Ubuntu 12.10 (Quantal Quetzal): | ignored (abandoned) |
| Ubuntu 13.04 (Raring Ringtail): | DNE |
| Ubuntu 13.10 (Saucy Salamander): | DNE |
Package
| Upstream: | released (3.8~rc5) |
| Ubuntu 10.04 LTS (Lucid Lynx): | ignored (reached end-of-life, does not affect buildd) |
| Ubuntu 12.04 LTS (Precise Pangolin): | DNE |
| Ubuntu 12.10 (Quantal Quetzal): | DNE |
| Ubuntu 13.04 (Raring Ringtail): | DNE |
| Ubuntu 13.10 (Saucy Salamander): | DNE |
Package
| Upstream: | released (3.8~rc5) |
| Ubuntu 10.04 LTS (Lucid Lynx): | DNE |
| Ubuntu 12.04 LTS (Precise Pangolin): | not-affected |
| Ubuntu 12.10 (Quantal Quetzal): | DNE |
| Ubuntu 13.04 (Raring Ringtail): | DNE |
| Ubuntu 13.10 (Saucy Salamander): | DNE |