CVE-2013-6381
Buffer overflow in the qeth_snmp_command function in drivers/s390/net/qeth_core_main.c in the...
CVE-2013-6381 is a medium vulnerability (CVSS 6.9) in Linux Kernel, published November 27, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.55%, the 46th percentile. Fixed in kernel 5.15.148.2-2.
- Severity
- 6.9 MediumCVSS 2.0, NVD
- Exploit chance
- 0.55%EPSS, 46th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
5.15.148.2-2kernel +187 more
Description
Buffer overflow in the qeth_snmp_command function in drivers/s390/net/qeth_core_main.c in the Linux kernel through 3.12.1 allows local users to cause a denial of service or possibly have unspecified other impact via an SNMP ioctl call with a length value that is incompatible with the command-buffer size.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
kernelAzure Linux:2 | before 5.15.148.2-2 | 5.15.148.2-2 |
kernelAzure Linux:3 | before 6.6.29.1-4 | 6.6.29.1-4 |
linuxDebian:12 | before 3.11.10-1 | 3.11.10-1 |
linuxDebian:13 | before 3.11.10-1 | 3.11.10-1 |
linuxDebian:14 | before 3.11.10-1 | 3.11.10-1 |
linux-2.6Debian:6.0 From an advisory covering 29 CVEs | before 2.6.32-48squeeze5, plus listed versions 2.6.32-302.6.32-30+m68k.52.6.32-312.6.32-31~bpo50+12.6.32-32 Show 26 moreShow less2.6.32-332.6.32-342.6.32-34squeeze12.6.32-352.6.32-35squeeze12.6.32-35squeeze22.6.32-35~bpo50+12.6.32-362.6.32-372.6.32-382.6.32-392.6.32-39squeeze12.6.32-402.6.32-412.6.32-41squeeze22.6.32-422.6.32-432.6.32-442.6.32-452.6.32-462.6.32-46squeeze12.6.32-472.6.32-482.6.32-48squeeze12.6.32-48squeeze32.6.32-48squeeze4 | 2.6.32-48squeeze5 |
btrfs-progsMageia:3 From an advisory covering 36 CVEs | before 0.20-0.rc1.20130705.2.mga3 | 0.20-0.rc1.20130705.2.mga3 |
drakxtoolsMageia:3 From an advisory covering 36 CVEs | before 15.54.1-3.mga3 | 15.54.1-3.mga3 |
kernelMageia:3 From an advisory covering 36 CVEs | before 3.10.24-2.mga3 | 3.10.24-2.mga3 |
kernel-firmwareMageia:3 From an advisory covering 36 CVEs | before 20130624-1.mga3 | 20130624-1.mga3 |
Show 178 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kernel-userspace-headersMageia:3 From an advisory covering 36 CVEs | before 3.10.24-2.mga3 | 3.10.24-2.mga3 |
kmod-vboxadditionsMageia:3 From an advisory covering 36 CVEs | before 4.2.16-4.mga3 | 4.2.16-4.mga3 |
kmod-virtualboxMageia:3 From an advisory covering 36 CVEs | before 4.2.16-4.mga3 | 4.2.16-4.mga3 |
kmod-xtables-addonsMageia:3 From an advisory covering 36 CVEs | before 2.3-8.mga3 | 2.3-8.mga3 |
ldetect-lstMageia:3 From an advisory covering 36 CVEs | before 0.1.330-1.mga3 | 0.1.330-1.mga3 |
libdrmMageia:3 From an advisory covering 36 CVEs | before 2.4.46-1.mga3 | 2.4.46-1.mga3 |
mesaMageia:3 From an advisory covering 36 CVEs | before 9.1.7-1.1.mga3 | 9.1.7-1.1.mga3 |
x11-driver-video-atiMageia:3 From an advisory covering 36 CVEs | before 7.2.0-1.mga3 | 7.2.0-1.mga3 |
x11-driver-video-intelMageia:3 From an advisory covering 36 CVEs | before 2.21.15-1.mga3 | 2.21.15-1.mga3 |
x11-driver-video-nouveauMageia:3 From an advisory covering 36 CVEs | before 1.0.9-1.mga3 | 1.0.9-1.mga3 |
xtables-addonsMageia:3 From an advisory covering 36 CVEs | before 2.3-2.mga3 | 2.3-2.mga3 |
broadcom-wlMageia:3 From an advisory covering 36 CVEs | before 6.30.223.141-1.mga3.nonfree | 6.30.223.141-1.mga3.nonfree |
fglrxMageia:3 From an advisory covering 36 CVEs | before 13.250.18-0.1.mga3.nonfree | 13.250.18-0.1.mga3.nonfree |
kernel-firmware-nonfreeMageia:3 From an advisory covering 36 CVEs | before 20130624-1.mga3.nonfree | 20130624-1.mga3.nonfree |
kmod-broadcom-wlMageia:3 From an advisory covering 36 CVEs | before 6.30.223.141-7.mga3.nonfree | 6.30.223.141-7.mga3.nonfree |
kmod-fglrxMageia:3 From an advisory covering 36 CVEs | before 13.250.18-5.mga3.nonfree | 13.250.18-5.mga3.nonfree |
kmod-nvidia173Mageia:3 From an advisory covering 36 CVEs | before 173.14.38-24.mga3.nonfree | 173.14.38-24.mga3.nonfree |
kmod-nvidia304Mageia:3 From an advisory covering 36 CVEs | before 304.108-9.mga3.nonfree | 304.108-9.mga3.nonfree |
kmod-nvidia-currentMageia:3 From an advisory covering 36 CVEs | before 319.60-8.mga3.nonfree | 319.60-8.mga3.nonfree |
nvidia173Mageia:3 From an advisory covering 36 CVEs | before 173.14.38-1.mga3.nonfree | 173.14.38-1.mga3.nonfree |
nvidia304Mageia:3 From an advisory covering 36 CVEs | before 304.108-2.mga3.nonfree | 304.108-2.mga3.nonfree |
nvidia-currentMageia:3 From an advisory covering 36 CVEs | before 319.60-1.mga3.nonfree | 319.60-1.mga3.nonfree |
radeon-firmwareMageia:3 From an advisory covering 36 CVEs | before 20130626-2.mga3.nonfree | 20130626-2.mga3.nonfree |
mesaMageia:3 From an advisory covering 36 CVEs | before 9.1.7-1.1.mga3.tainted | 9.1.7-1.1.mga3.tainted |
kernel-linusMageia:3 From an advisory covering 31 CVEs | before 3.10.24-1.mga3 | 3.10.24-1.mga3 |
kernel-tmbMageia:3 From an advisory covering 36 CVEs | before 3.10.24-2.mga3 | 3.10.24-2.mga3 |
kernel-rtMageia:3 From an advisory covering 36 CVEs | before 3.10.24-0.rt20.2.mga3 | 3.10.24-0.rt20.2.mga3 |
kernel-vserverMageia:3 From an advisory covering 36 CVEs | before 3.10.24-2.mga3 | 3.10.24-2.mga3 |
kernelRed Hat:enterprise_linux:6::client From an advisory covering 4 CVEs | before 0:2.6.32-431.5.1.el6 | 0:2.6.32-431.5.1.el6 |
kernel-abi-whitelistsRed Hat:enterprise_linux:6::client From an advisory covering 4 CVEs | before 0:2.6.32-431.5.1.el6 | 0:2.6.32-431.5.1.el6 |
kernel-debugRed Hat:enterprise_linux:6::client From an advisory covering 4 CVEs | before 0:2.6.32-431.5.1.el6 | 0:2.6.32-431.5.1.el6 |
kernel-debug-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 4 CVEs | before 0:2.6.32-431.5.1.el6 | 0:2.6.32-431.5.1.el6 |
kernel-debug-develRed Hat:enterprise_linux:6::client From an advisory covering 4 CVEs | before 0:2.6.32-431.5.1.el6 | 0:2.6.32-431.5.1.el6 |
kernel-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 4 CVEs | before 0:2.6.32-431.5.1.el6 | 0:2.6.32-431.5.1.el6 |
kernel-debuginfo-common-i686Red Hat:enterprise_linux:6::client From an advisory covering 4 CVEs | before 0:2.6.32-431.5.1.el6 | 0:2.6.32-431.5.1.el6 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:6::client From an advisory covering 4 CVEs | before 0:2.6.32-431.5.1.el6 | 0:2.6.32-431.5.1.el6 |
kernel-develRed Hat:enterprise_linux:6::client From an advisory covering 4 CVEs | before 0:2.6.32-431.5.1.el6 | 0:2.6.32-431.5.1.el6 |
kernel-docRed Hat:enterprise_linux:6::client From an advisory covering 4 CVEs | before 0:2.6.32-431.5.1.el6 | 0:2.6.32-431.5.1.el6 |
kernel-firmwareRed Hat:enterprise_linux:6::client From an advisory covering 4 CVEs | before 0:2.6.32-431.5.1.el6 | 0:2.6.32-431.5.1.el6 |
kernel-headersRed Hat:enterprise_linux:6::client From an advisory covering 4 CVEs | before 0:2.6.32-431.5.1.el6 | 0:2.6.32-431.5.1.el6 |
perfRed Hat:enterprise_linux:6::client From an advisory covering 4 CVEs | before 0:2.6.32-431.5.1.el6 | 0:2.6.32-431.5.1.el6 |
perf-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 4 CVEs | before 0:2.6.32-431.5.1.el6 | 0:2.6.32-431.5.1.el6 |
python-perf-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 4 CVEs | before 0:2.6.32-431.5.1.el6 | 0:2.6.32-431.5.1.el6 |
python-perfRed Hat:enterprise_linux:6::client From an advisory covering 4 CVEs | before 0:2.6.32-431.5.1.el6 | 0:2.6.32-431.5.1.el6 |
kernelRed Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs | before 0:2.6.32-431.5.1.el6 | 0:2.6.32-431.5.1.el6 |
kernel-abi-whitelistsRed Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs | before 0:2.6.32-431.5.1.el6 | 0:2.6.32-431.5.1.el6 |
kernel-debugRed Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs | before 0:2.6.32-431.5.1.el6 | 0:2.6.32-431.5.1.el6 |
kernel-debug-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs | before 0:2.6.32-431.5.1.el6 | 0:2.6.32-431.5.1.el6 |
kernel-debug-develRed Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs | before 0:2.6.32-431.5.1.el6 | 0:2.6.32-431.5.1.el6 |
kernel-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs | before 0:2.6.32-431.5.1.el6 | 0:2.6.32-431.5.1.el6 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs | before 0:2.6.32-431.5.1.el6 | 0:2.6.32-431.5.1.el6 |
kernel-develRed Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs | before 0:2.6.32-431.5.1.el6 | 0:2.6.32-431.5.1.el6 |
kernel-docRed Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs | before 0:2.6.32-431.5.1.el6 | 0:2.6.32-431.5.1.el6 |
kernel-firmwareRed Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs | before 0:2.6.32-431.5.1.el6 | 0:2.6.32-431.5.1.el6 |
kernel-headersRed Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs | before 0:2.6.32-431.5.1.el6 | 0:2.6.32-431.5.1.el6 |
perfRed Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs | before 0:2.6.32-431.5.1.el6 | 0:2.6.32-431.5.1.el6 |
perf-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs | before 0:2.6.32-431.5.1.el6 | 0:2.6.32-431.5.1.el6 |
python-perf-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs | before 0:2.6.32-431.5.1.el6 | 0:2.6.32-431.5.1.el6 |
python-perfRed Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs | before 0:2.6.32-431.5.1.el6 | 0:2.6.32-431.5.1.el6 |
kernelRed Hat:enterprise_linux:6::server From an advisory covering 4 CVEs | before 0:2.6.32-431.5.1.el6 | 0:2.6.32-431.5.1.el6 |
kernel-abi-whitelistsRed Hat:enterprise_linux:6::server From an advisory covering 4 CVEs | before 0:2.6.32-431.5.1.el6 | 0:2.6.32-431.5.1.el6 |
kernel-bootwrapperRed Hat:enterprise_linux:6::server From an advisory covering 4 CVEs | before 0:2.6.32-431.5.1.el6 | 0:2.6.32-431.5.1.el6 |
kernel-debugRed Hat:enterprise_linux:6::server From an advisory covering 4 CVEs | before 0:2.6.32-431.5.1.el6 | 0:2.6.32-431.5.1.el6 |
kernel-debug-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 4 CVEs | before 0:2.6.32-431.5.1.el6 | 0:2.6.32-431.5.1.el6 |
kernel-debug-develRed Hat:enterprise_linux:6::server From an advisory covering 4 CVEs | before 0:2.6.32-431.5.1.el6 | 0:2.6.32-431.5.1.el6 |
kernel-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 4 CVEs | before 0:2.6.32-431.5.1.el6 | 0:2.6.32-431.5.1.el6 |
kernel-debuginfo-common-i686Red Hat:enterprise_linux:6::server From an advisory covering 4 CVEs | before 0:2.6.32-431.5.1.el6 | 0:2.6.32-431.5.1.el6 |
kernel-debuginfo-common-ppc64Red Hat:enterprise_linux:6::server From an advisory covering 4 CVEs | before 0:2.6.32-431.5.1.el6 | 0:2.6.32-431.5.1.el6 |
kernel-debuginfo-common-s390xRed Hat:enterprise_linux:6::server From an advisory covering 4 CVEs | before 0:2.6.32-431.5.1.el6 | 0:2.6.32-431.5.1.el6 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:6::server From an advisory covering 4 CVEs | before 0:2.6.32-431.5.1.el6 | 0:2.6.32-431.5.1.el6 |
kernel-develRed Hat:enterprise_linux:6::server From an advisory covering 4 CVEs | before 0:2.6.32-431.5.1.el6 | 0:2.6.32-431.5.1.el6 |
kernel-docRed Hat:enterprise_linux:6::server From an advisory covering 4 CVEs | before 0:2.6.32-431.5.1.el6 | 0:2.6.32-431.5.1.el6 |
kernel-firmwareRed Hat:enterprise_linux:6::server From an advisory covering 4 CVEs | before 0:2.6.32-431.5.1.el6 | 0:2.6.32-431.5.1.el6 |
kernel-headersRed Hat:enterprise_linux:6::server From an advisory covering 4 CVEs | before 0:2.6.32-431.5.1.el6 | 0:2.6.32-431.5.1.el6 |
kernel-kdumpRed Hat:enterprise_linux:6::server From an advisory covering 4 CVEs | before 0:2.6.32-431.5.1.el6 | 0:2.6.32-431.5.1.el6 |
kernel-kdump-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 4 CVEs | before 0:2.6.32-431.5.1.el6 | 0:2.6.32-431.5.1.el6 |
kernel-kdump-develRed Hat:enterprise_linux:6::server From an advisory covering 4 CVEs | before 0:2.6.32-431.5.1.el6 | 0:2.6.32-431.5.1.el6 |
perfRed Hat:enterprise_linux:6::server From an advisory covering 4 CVEs | before 0:2.6.32-431.5.1.el6 | 0:2.6.32-431.5.1.el6 |
perf-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 4 CVEs | before 0:2.6.32-431.5.1.el6 | 0:2.6.32-431.5.1.el6 |
python-perf-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 4 CVEs | before 0:2.6.32-431.5.1.el6 | 0:2.6.32-431.5.1.el6 |
python-perfRed Hat:enterprise_linux:6::server From an advisory covering 4 CVEs | before 0:2.6.32-431.5.1.el6 | 0:2.6.32-431.5.1.el6 |
kernelRed Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs | before 0:2.6.32-431.5.1.el6 | 0:2.6.32-431.5.1.el6 |
kernel-abi-whitelistsRed Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs | before 0:2.6.32-431.5.1.el6 | 0:2.6.32-431.5.1.el6 |
kernel-debugRed Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs | before 0:2.6.32-431.5.1.el6 | 0:2.6.32-431.5.1.el6 |
kernel-debug-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs | before 0:2.6.32-431.5.1.el6 | 0:2.6.32-431.5.1.el6 |
kernel-debug-develRed Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs | before 0:2.6.32-431.5.1.el6 | 0:2.6.32-431.5.1.el6 |
kernel-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs | before 0:2.6.32-431.5.1.el6 | 0:2.6.32-431.5.1.el6 |
kernel-debuginfo-common-i686Red Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs | before 0:2.6.32-431.5.1.el6 | 0:2.6.32-431.5.1.el6 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs | before 0:2.6.32-431.5.1.el6 | 0:2.6.32-431.5.1.el6 |
kernel-develRed Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs | before 0:2.6.32-431.5.1.el6 | 0:2.6.32-431.5.1.el6 |
kernel-docRed Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs | before 0:2.6.32-431.5.1.el6 | 0:2.6.32-431.5.1.el6 |
kernel-firmwareRed Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs | before 0:2.6.32-431.5.1.el6 | 0:2.6.32-431.5.1.el6 |
kernel-headersRed Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs | before 0:2.6.32-431.5.1.el6 | 0:2.6.32-431.5.1.el6 |
perfRed Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs | before 0:2.6.32-431.5.1.el6 | 0:2.6.32-431.5.1.el6 |
perf-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs | before 0:2.6.32-431.5.1.el6 | 0:2.6.32-431.5.1.el6 |
python-perf-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs | before 0:2.6.32-431.5.1.el6 | 0:2.6.32-431.5.1.el6 |
python-perfRed Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs | before 0:2.6.32-431.5.1.el6 | 0:2.6.32-431.5.1.el6 |
kernelRed Hat:rhel_eus:6.4::computenode From an advisory covering 7 CVEs | before 0:2.6.32-358.37.1.el6 | 0:2.6.32-358.37.1.el6 |
kernel-debugRed Hat:rhel_eus:6.4::computenode From an advisory covering 7 CVEs | before 0:2.6.32-358.37.1.el6 | 0:2.6.32-358.37.1.el6 |
kernel-debug-debuginfoRed Hat:rhel_eus:6.4::computenode From an advisory covering 7 CVEs | before 0:2.6.32-358.37.1.el6 | 0:2.6.32-358.37.1.el6 |
kernel-debug-develRed Hat:rhel_eus:6.4::computenode From an advisory covering 7 CVEs | before 0:2.6.32-358.37.1.el6 | 0:2.6.32-358.37.1.el6 |
kernel-debuginfoRed Hat:rhel_eus:6.4::computenode From an advisory covering 7 CVEs | before 0:2.6.32-358.37.1.el6 | 0:2.6.32-358.37.1.el6 |
kernel-debuginfo-common-x86_64Red Hat:rhel_eus:6.4::computenode From an advisory covering 7 CVEs | before 0:2.6.32-358.37.1.el6 | 0:2.6.32-358.37.1.el6 |
kernel-develRed Hat:rhel_eus:6.4::computenode From an advisory covering 7 CVEs | before 0:2.6.32-358.37.1.el6 | 0:2.6.32-358.37.1.el6 |
kernel-docRed Hat:rhel_eus:6.4::computenode From an advisory covering 7 CVEs | before 0:2.6.32-358.37.1.el6 | 0:2.6.32-358.37.1.el6 |
kernel-firmwareRed Hat:rhel_eus:6.4::computenode From an advisory covering 7 CVEs | before 0:2.6.32-358.37.1.el6 | 0:2.6.32-358.37.1.el6 |
perfRed Hat:rhel_eus:6.4::computenode From an advisory covering 7 CVEs | before 0:2.6.32-358.37.1.el6 | 0:2.6.32-358.37.1.el6 |
perf-debuginfoRed Hat:rhel_eus:6.4::computenode From an advisory covering 7 CVEs | before 0:2.6.32-358.37.1.el6 | 0:2.6.32-358.37.1.el6 |
python-perf-debuginfoRed Hat:rhel_eus:6.4::computenode From an advisory covering 7 CVEs | before 0:2.6.32-358.37.1.el6 | 0:2.6.32-358.37.1.el6 |
python-perfRed Hat:rhel_eus:6.4::computenode From an advisory covering 7 CVEs | before 0:2.6.32-358.37.1.el6 | 0:2.6.32-358.37.1.el6 |
kernelRed Hat:rhel_eus:6.4::server From an advisory covering 7 CVEs | before 0:2.6.32-358.37.1.el6 | 0:2.6.32-358.37.1.el6 |
kernel-bootwrapperRed Hat:rhel_eus:6.4::server From an advisory covering 7 CVEs | before 0:2.6.32-358.37.1.el6 | 0:2.6.32-358.37.1.el6 |
kernel-debugRed Hat:rhel_eus:6.4::server From an advisory covering 7 CVEs | before 0:2.6.32-358.37.1.el6 | 0:2.6.32-358.37.1.el6 |
kernel-debug-debuginfoRed Hat:rhel_eus:6.4::server From an advisory covering 7 CVEs | before 0:2.6.32-358.37.1.el6 | 0:2.6.32-358.37.1.el6 |
kernel-debug-develRed Hat:rhel_eus:6.4::server From an advisory covering 7 CVEs | before 0:2.6.32-358.37.1.el6 | 0:2.6.32-358.37.1.el6 |
kernel-debuginfoRed Hat:rhel_eus:6.4::server From an advisory covering 7 CVEs | before 0:2.6.32-358.37.1.el6 | 0:2.6.32-358.37.1.el6 |
kernel-debuginfo-common-i686Red Hat:rhel_eus:6.4::server From an advisory covering 7 CVEs | before 0:2.6.32-358.37.1.el6 | 0:2.6.32-358.37.1.el6 |
kernel-debuginfo-common-ppc64Red Hat:rhel_eus:6.4::server From an advisory covering 7 CVEs | before 0:2.6.32-358.37.1.el6 | 0:2.6.32-358.37.1.el6 |
kernel-debuginfo-common-s390xRed Hat:rhel_eus:6.4::server From an advisory covering 7 CVEs | before 0:2.6.32-358.37.1.el6 | 0:2.6.32-358.37.1.el6 |
kernel-debuginfo-common-x86_64Red Hat:rhel_eus:6.4::server From an advisory covering 7 CVEs | before 0:2.6.32-358.37.1.el6 | 0:2.6.32-358.37.1.el6 |
kernel-develRed Hat:rhel_eus:6.4::server From an advisory covering 7 CVEs | before 0:2.6.32-358.37.1.el6 | 0:2.6.32-358.37.1.el6 |
kernel-docRed Hat:rhel_eus:6.4::server From an advisory covering 7 CVEs | before 0:2.6.32-358.37.1.el6 | 0:2.6.32-358.37.1.el6 |
kernel-firmwareRed Hat:rhel_eus:6.4::server From an advisory covering 7 CVEs | before 0:2.6.32-358.37.1.el6 | 0:2.6.32-358.37.1.el6 |
kernel-kdumpRed Hat:rhel_eus:6.4::server From an advisory covering 7 CVEs | before 0:2.6.32-358.37.1.el6 | 0:2.6.32-358.37.1.el6 |
kernel-kdump-debuginfoRed Hat:rhel_eus:6.4::server From an advisory covering 7 CVEs | before 0:2.6.32-358.37.1.el6 | 0:2.6.32-358.37.1.el6 |
kernel-kdump-develRed Hat:rhel_eus:6.4::server From an advisory covering 7 CVEs | before 0:2.6.32-358.37.1.el6 | 0:2.6.32-358.37.1.el6 |
perfRed Hat:rhel_eus:6.4::server From an advisory covering 7 CVEs | before 0:2.6.32-358.37.1.el6 | 0:2.6.32-358.37.1.el6 |
perf-debuginfoRed Hat:rhel_eus:6.4::server From an advisory covering 7 CVEs | before 0:2.6.32-358.37.1.el6 | 0:2.6.32-358.37.1.el6 |
python-perf-debuginfoRed Hat:rhel_eus:6.4::server From an advisory covering 7 CVEs | before 0:2.6.32-358.37.1.el6 | 0:2.6.32-358.37.1.el6 |
python-perfRed Hat:rhel_eus:6.4::server From an advisory covering 7 CVEs | before 0:2.6.32-358.37.1.el6 | 0:2.6.32-358.37.1.el6 |
kernelRed Hat:enterprise_linux:5::client From an advisory covering 7 CVEs | before 0:2.6.18-371.6.1.el5 | 0:2.6.18-371.6.1.el5 |
kernel-PAERed Hat:enterprise_linux:5::client From an advisory covering 7 CVEs | before 0:2.6.18-371.6.1.el5 | 0:2.6.18-371.6.1.el5 |
kernel-PAE-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 7 CVEs | before 0:2.6.18-371.6.1.el5 | 0:2.6.18-371.6.1.el5 |
kernel-PAE-develRed Hat:enterprise_linux:5::client From an advisory covering 7 CVEs | before 0:2.6.18-371.6.1.el5 | 0:2.6.18-371.6.1.el5 |
kernel-debugRed Hat:enterprise_linux:5::client From an advisory covering 7 CVEs | before 0:2.6.18-371.6.1.el5 | 0:2.6.18-371.6.1.el5 |
kernel-debug-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 7 CVEs | before 0:2.6.18-371.6.1.el5 | 0:2.6.18-371.6.1.el5 |
kernel-debug-develRed Hat:enterprise_linux:5::client From an advisory covering 7 CVEs | before 0:2.6.18-371.6.1.el5 | 0:2.6.18-371.6.1.el5 |
kernel-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 7 CVEs | before 0:2.6.18-371.6.1.el5 | 0:2.6.18-371.6.1.el5 |
kernel-debuginfo-commonRed Hat:enterprise_linux:5::client From an advisory covering 7 CVEs | before 0:2.6.18-371.6.1.el5 | 0:2.6.18-371.6.1.el5 |
kernel-develRed Hat:enterprise_linux:5::client From an advisory covering 7 CVEs | before 0:2.6.18-371.6.1.el5 | 0:2.6.18-371.6.1.el5 |
kernel-docRed Hat:enterprise_linux:5::client From an advisory covering 7 CVEs | before 0:2.6.18-371.6.1.el5 | 0:2.6.18-371.6.1.el5 |
kernel-xenRed Hat:enterprise_linux:5::client From an advisory covering 7 CVEs | before 0:2.6.18-371.6.1.el5 | 0:2.6.18-371.6.1.el5 |
kernel-xen-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 7 CVEs | before 0:2.6.18-371.6.1.el5 | 0:2.6.18-371.6.1.el5 |
kernel-xen-develRed Hat:enterprise_linux:5::client From an advisory covering 7 CVEs | before 0:2.6.18-371.6.1.el5 | 0:2.6.18-371.6.1.el5 |
kernelRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs | before 0:2.6.18-371.6.1.el5 | 0:2.6.18-371.6.1.el5 |
kernel-PAERed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs | before 0:2.6.18-371.6.1.el5 | 0:2.6.18-371.6.1.el5 |
kernel-PAE-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs | before 0:2.6.18-371.6.1.el5 | 0:2.6.18-371.6.1.el5 |
kernel-PAE-develRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs | before 0:2.6.18-371.6.1.el5 | 0:2.6.18-371.6.1.el5 |
kernel-debugRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs | before 0:2.6.18-371.6.1.el5 | 0:2.6.18-371.6.1.el5 |
kernel-debug-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs | before 0:2.6.18-371.6.1.el5 | 0:2.6.18-371.6.1.el5 |
kernel-debug-develRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs | before 0:2.6.18-371.6.1.el5 | 0:2.6.18-371.6.1.el5 |
kernel-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs | before 0:2.6.18-371.6.1.el5 | 0:2.6.18-371.6.1.el5 |
kernel-debuginfo-commonRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs | before 0:2.6.18-371.6.1.el5 | 0:2.6.18-371.6.1.el5 |
kernel-develRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs | before 0:2.6.18-371.6.1.el5 | 0:2.6.18-371.6.1.el5 |
kernel-docRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs | before 0:2.6.18-371.6.1.el5 | 0:2.6.18-371.6.1.el5 |
kernel-kdumpRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs | before 0:2.6.18-371.6.1.el5 | 0:2.6.18-371.6.1.el5 |
kernel-kdump-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs | before 0:2.6.18-371.6.1.el5 | 0:2.6.18-371.6.1.el5 |
kernel-kdump-develRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs | before 0:2.6.18-371.6.1.el5 | 0:2.6.18-371.6.1.el5 |
kernel-xenRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs | before 0:2.6.18-371.6.1.el5 | 0:2.6.18-371.6.1.el5 |
kernel-xen-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs | before 0:2.6.18-371.6.1.el5 | 0:2.6.18-371.6.1.el5 |
kernel-xen-develRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs | before 0:2.6.18-371.6.1.el5 | 0:2.6.18-371.6.1.el5 |
kernelRed Hat:rhel_eus:5.9 From an advisory covering 2 CVEs | before 0:2.6.18-348.25.1.el5 | 0:2.6.18-348.25.1.el5 |
kernel-PAERed Hat:rhel_eus:5.9 From an advisory covering 2 CVEs | before 0:2.6.18-348.25.1.el5 | 0:2.6.18-348.25.1.el5 |
kernel-PAE-debuginfoRed Hat:rhel_eus:5.9 From an advisory covering 2 CVEs | before 0:2.6.18-348.25.1.el5 | 0:2.6.18-348.25.1.el5 |
kernel-PAE-develRed Hat:rhel_eus:5.9 From an advisory covering 2 CVEs | before 0:2.6.18-348.25.1.el5 | 0:2.6.18-348.25.1.el5 |
kernel-debugRed Hat:rhel_eus:5.9 From an advisory covering 2 CVEs | before 0:2.6.18-348.25.1.el5 | 0:2.6.18-348.25.1.el5 |
kernel-debug-debuginfoRed Hat:rhel_eus:5.9 From an advisory covering 2 CVEs | before 0:2.6.18-348.25.1.el5 | 0:2.6.18-348.25.1.el5 |
kernel-debug-develRed Hat:rhel_eus:5.9 From an advisory covering 2 CVEs | before 0:2.6.18-348.25.1.el5 | 0:2.6.18-348.25.1.el5 |
kernel-debuginfoRed Hat:rhel_eus:5.9 From an advisory covering 2 CVEs | before 0:2.6.18-348.25.1.el5 | 0:2.6.18-348.25.1.el5 |
kernel-debuginfo-commonRed Hat:rhel_eus:5.9 From an advisory covering 2 CVEs | before 0:2.6.18-348.25.1.el5 | 0:2.6.18-348.25.1.el5 |
kernel-develRed Hat:rhel_eus:5.9 From an advisory covering 2 CVEs | before 0:2.6.18-348.25.1.el5 | 0:2.6.18-348.25.1.el5 |
kernel-docRed Hat:rhel_eus:5.9 From an advisory covering 2 CVEs | before 0:2.6.18-348.25.1.el5 | 0:2.6.18-348.25.1.el5 |
kernel-kdumpRed Hat:rhel_eus:5.9 From an advisory covering 2 CVEs | before 0:2.6.18-348.25.1.el5 | 0:2.6.18-348.25.1.el5 |
kernel-kdump-debuginfoRed Hat:rhel_eus:5.9 From an advisory covering 2 CVEs | before 0:2.6.18-348.25.1.el5 | 0:2.6.18-348.25.1.el5 |
kernel-kdump-develRed Hat:rhel_eus:5.9 From an advisory covering 2 CVEs | before 0:2.6.18-348.25.1.el5 | 0:2.6.18-348.25.1.el5 |
kernel-xenRed Hat:rhel_eus:5.9 From an advisory covering 2 CVEs | before 0:2.6.18-348.25.1.el5 | 0:2.6.18-348.25.1.el5 |
kernel-xen-debuginfoRed Hat:rhel_eus:5.9 From an advisory covering 2 CVEs | before 0:2.6.18-348.25.1.el5 | 0:2.6.18-348.25.1.el5 |
kernel-xen-develRed Hat:rhel_eus:5.9 From an advisory covering 2 CVEs | before 0:2.6.18-348.25.1.el5 | 0:2.6.18-348.25.1.el5 |
What each source reports
NVD Score used
Buffer overflow in the qeth_snmp_command function in drivers/s390/net/qeth_core_main.c in the Linux kernel through 3.12.1 allows local users to cause a denial of service or possibly have unspecified other impact via an SNMP ioctl call with a length value that is incompatible with the command-buffer size.
- Record
CVE-2013-6381- CVSS 2.0
- 6.9 Medium
AV:L/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE ListNo score
Buffer overflow in the qeth_snmp_command function in drivers/s390/net/qeth_core_main.c in the Linux kernel through 3.12.1 allows local users to cause a denial of service or possibly have unspecified other impact via an SNMP ioctl call with a length value that is incompatible with the command-buffer size.
- Record
CVE-2013-6381- Updated
- 2026-11-02
EUVDEUVD-2013-6206No score
Buffer overflow in the qeth_snmp_command function in drivers/s390/net/qeth_core_main.c in the Linux kernel through 3.12.1 allows local users to cause a denial of service or possibly have unspecified other impact via an SNMP ioctl call with a length value that is incompatible with the command-buffer size.
- Record
EUVD-2013-6206- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-f88x-mj9c-xm2gNo score
Buffer overflow in the qeth_snmp_command function in drivers/s390/net/qeth_core_main.c in the...
Buffer overflow in the qeth_snmp_command function in drivers/s390/net/qeth_core_main.c in the Linux kernel through 3.12.1 allows local users to cause a denial of service or possibly have unspecified other impact via an SNMP ioctl call with a length value that is incompatible with the command-buffer size.
- Record
GHSA-f88x-mj9c-xm2g- Weakness
- CWE-119
- Updated
- 2026-11-02
OSVAZL-34238No score
CVE-2013-6381 affecting package kernel for versions less than 5.15.148.2-2
Buffer overflow in the qeth_snmp_command function in drivers/s390/net/qeth_core_main.c in the Linux kernel through 3.12.1 allows local users to cause a denial of service or possibly have unspecified other impact via an SNMP ioctl call with a length value that is incompatible with the command-buffer size.
- Record
AZL-34238- Updated
- 2026-11-02
OSVAZL-34847No score
CVE-2013-6381 affecting package kernel for versions less than 6.6.29.1-4
Buffer overflow in the qeth_snmp_command function in drivers/s390/net/qeth_core_main.c in the Linux kernel through 3.12.1 allows local users to cause a denial of service or possibly have unspecified other impact via an SNMP ioctl call with a length value that is incompatible with the command-buffer size.
- Record
AZL-34847- Updated
- 2026-11-02
Show 8 moreShow less
OSVNo score
Buffer overflow in the qeth_snmp_command function in drivers/s390/net/qeth_core_main.c in the Linux kernel through 3.12.1 allows local users to cause a denial of service or possibly have unspecified other impact via an SNMP ioctl call with a length value that is incompatible with the command-buffer size.
- Record
CVE-2013-6381- Updated
- 2026-11-02
OSVDEBIAN-CVE-2013-6381No score
Buffer overflow in the qeth_snmp_command function in drivers/s390/net/qeth_core_main.c in the Linux kernel through 3.12.1 allows local users to cause a denial of service or possibly have unspecified other impact via an SNMP ioctl call with a length value that is incompatible with the command-buffer size.
- Record
DEBIAN-CVE-2013-6381- Updated
- 2026-11-02
OSVMGASA-2013-0371No score
Updated kernel and related packages fix security vulnerabilities
This kernel update provides an update to the 3.10 longterm branch, currently 3.10.24 and fixes the following security issues:
The ipv6_create_tempaddr function in net/ipv6/addrconf.c in the Linux kernel through 3.10 does not properly handle problems with the generation of IPv6 temporary addresses, which allows remote attackers to cause a denial of service (excessive retries and address-generation outage), and consequently obtain sensitive information, via ICMPv6 Router Advertisement (RA) messages. (CVE-2013-0343)
net/ceph/auth_none.c in the Linux kernel through 3.10 allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via an auth_reply message that triggers an attempted build_request operation. (CVE-2013-1059)
The dispatch_discard_io function in drivers/block/xen-blkback/blkback.c in the Xen blkback implementation in the Linux kernel before 3.10.5 allows guest OS users to cause a denial of service (data loss) via filesystem write operations on a read-only disk that supports the (1) BLKIF_OP_DISCARD (aka discard or TRIM) or (2) SCSI UNMAP feature. (CVE-2013-2140)
The HP Smart Array controller disk-array driver and Compaq SMART2 controller disk-array driver in the Linux kernel through 3.9.4 do not initialize certain data structures, which allows local users to obtain sensitive information from kernel memory via (1) a crafted IDAGETPCIINFO command for a /dev/ida device, related to the ida_locked_ioctl function in drivers/block/cpqarray.c or (2) a crafted CCISS_PASSTHRU32 command for a /dev/cciss device, related to the cciss_ioctl32_passthru function in drivers/block/cciss.c. (CVE-2013-2147)
Format string vulnerability in the register_disk function in block/genhd.c in the Linux kernel through 3.9.4 allows local users to gain privileges by leveraging root access and writing format string specifiers to /sys/module/md_mod/parameters/new_array in order to create a crafted /dev/md device name. (CVE-2013-2851)
Multiple array index errors in drivers/hid/hid-core.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11 allow physically proximate attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted device that provides an invalid Report ID (CVE-2013-2888).
drivers/hid/hid-zpff.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_ZEROPLUS is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device (CVE-2013-2889).
drivers/hid/hid-steelseries.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_STEELSERIES is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device. (CVE-2013-2891)
drivers/hid/hid-pl.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_PANTHERLORD is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device (CVE-2013-2892).
The Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_LOGITECH_FF, CONFIG_LOGIG940_FF, or CONFIG_LOGIWHEELS_FF is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device, related to (1) drivers/hid/hid-lgff.c, (2) drivers/hid/hid-lg3ff.c, and (3) drivers/hid/hid-lg4ff.c (CVE-2013-2893).
drivers/hid/hid-lenovo-tpkbd.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_LENOVO_TPKBD is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device. (CVE-2013-2894)
drivers/hid/hid-logitech-dj.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11,…
- Record
MGASA-2013-0371- Updated
- 2026-11-02
OSVMGASA-2013-0372No score
Updated kernel-linus packages fix security vulnerabilities
This kernel-linus update provides an update to the 3.10 longterm branch, currently 3.10.24 and fixes the following security issues:
The ipv6_create_tempaddr function in net/ipv6/addrconf.c in the Linux kernel through 3.10 does not properly handle problems with the generation of IPv6 temporary addresses, which allows remote attackers to cause a denial of service (excessive retries and address-generation outage), and consequently obtain sensitive information, via ICMPv6 Router Advertisement (RA) messages. (CVE-2013-0343)
net/ceph/auth_none.c in the Linux kernel through 3.10 allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via an auth_reply message that triggers an attempted build_request operation. (CVE-2013-1059)
The dispatch_discard_io function in drivers/block/xen-blkback/blkback.c in the Xen blkback implementation in the Linux kernel before 3.10.5 allows guest OS users to cause a denial of service (data loss) via filesystem write operations on a read-only disk that supports the (1) BLKIF_OP_DISCARD (aka discard or TRIM) or (2) SCSI UNMAP feature. (CVE-2013-2140)
The HP Smart Array controller disk-array driver and Compaq SMART2 controller disk-array driver in the Linux kernel through 3.9.4 do not initialize certain data structures, which allows local users to obtain sensitive information from kernel memory via (1) a crafted IDAGETPCIINFO command for a /dev/ida device, related to the ida_locked_ioctl function in drivers/block/cpqarray.c or (2) a crafted CCISS_PASSTHRU32 command for a /dev/cciss device, related to the cciss_ioctl32_passthru function in drivers/block/cciss.c. (CVE-2013-2147)
Format string vulnerability in the register_disk function in block/genhd.c in the Linux kernel through 3.9.4 allows local users to gain privileges by leveraging root access and writing format string specifiers to /sys/module/md_mod/parameters/new_array in order to create a crafted /dev/md device name. (CVE-2013-2851)
Multiple array index errors in drivers/hid/hid-core.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11 allow physically proximate attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted device that provides an invalid Report ID (CVE-2013-2888).
drivers/hid/hid-zpff.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_ZEROPLUS is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device (CVE-2013-2889).
drivers/hid/hid-steelseries.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_STEELSERIES is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device. (CVE-2013-2891)
drivers/hid/hid-pl.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_PANTHERLORD is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device (CVE-2013-2892).
The Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_LOGITECH_FF, CONFIG_LOGIG940_FF, or CONFIG_LOGIWHEELS_FF is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device, related to (1) drivers/hid/hid-lgff.c, (2) drivers/hid/hid-lg3ff.c, and (3) drivers/hid/hid-lg4ff.c (CVE-2013-2893).
drivers/hid/hid-lenovo-tpkbd.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_LENOVO_TPKBD is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device. (CVE-2013-2894)
drivers/hid/hid-logitech-dj.c in the Human Interface Device (HID) subsystem in the Linux kernel through…
- Record
MGASA-2013-0372- Updated
- 2026-11-02
OSVMGASA-2013-0373No score
Updated kernel-tmb packages fix security vulnerabilities
This kernel-tmb update provides an update to the 3.10 longterm branch, currently 3.10.24 and fixes the following security issues:
The ipv6_create_tempaddr function in net/ipv6/addrconf.c in the Linux kernel through 3.10 does not properly handle problems with the generation of IPv6 temporary addresses, which allows remote attackers to cause a denial of service (excessive retries and address-generation outage), and consequently obtain sensitive information, via ICMPv6 Router Advertisement (RA) messages. (CVE-2013-0343)
net/ceph/auth_none.c in the Linux kernel through 3.10 allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via an auth_reply message that triggers an attempted build_request operation. (CVE-2013-1059)
The dispatch_discard_io function in drivers/block/xen-blkback/blkback.c in the Xen blkback implementation in the Linux kernel before 3.10.5 allows guest OS users to cause a denial of service (data loss) via filesystem write operations on a read-only disk that supports the (1) BLKIF_OP_DISCARD (aka discard or TRIM) or (2) SCSI UNMAP feature. (CVE-2013-2140)
The HP Smart Array controller disk-array driver and Compaq SMART2 controller disk-array driver in the Linux kernel through 3.9.4 do not initialize certain data structures, which allows local users to obtain sensitive information from kernel memory via (1) a crafted IDAGETPCIINFO command for a /dev/ida device, related to the ida_locked_ioctl function in drivers/block/cpqarray.c or (2) a crafted CCISS_PASSTHRU32 command for a /dev/cciss device, related to the cciss_ioctl32_passthru function in drivers/block/cciss.c. (CVE-2013-2147)
Format string vulnerability in the register_disk function in block/genhd.c in the Linux kernel through 3.9.4 allows local users to gain privileges by leveraging root access and writing format string specifiers to /sys/module/md_mod/parameters/new_array in order to create a crafted /dev/md device name. (CVE-2013-2851)
Multiple array index errors in drivers/hid/hid-core.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11 allow physically proximate attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted device that provides an invalid Report ID (CVE-2013-2888).
drivers/hid/hid-zpff.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_ZEROPLUS is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device (CVE-2013-2889).
drivers/hid/hid-steelseries.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_STEELSERIES is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device. (CVE-2013-2891)
drivers/hid/hid-pl.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_PANTHERLORD is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device (CVE-2013-2892).
The Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_LOGITECH_FF, CONFIG_LOGIG940_FF, or CONFIG_LOGIWHEELS_FF is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device, related to (1) drivers/hid/hid-lgff.c, (2) drivers/hid/hid-lg3ff.c, and (3) drivers/hid/hid-lg4ff.c (CVE-2013-2893).
drivers/hid/hid-lenovo-tpkbd.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_LENOVO_TPKBD is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device. (CVE-2013-2894)
drivers/hid/hid-logitech-dj.c in the Human Interface Device (HID) subsystem in the Linux kernel through…
- Record
MGASA-2013-0373- Updated
- 2026-11-02
OSVMGASA-2013-0374No score
Updated kernel-rt packages fix security vulnerabilities
This kernel-rt update provides an update to the 3.10 longterm branch, currently 3.10.24 and fixes the following security issues:
The ipv6_create_tempaddr function in net/ipv6/addrconf.c in the Linux kernel through 3.10 does not properly handle problems with the generation of IPv6 temporary addresses, which allows remote attackers to cause a denial of service (excessive retries and address-generation outage), and consequently obtain sensitive information, via ICMPv6 Router Advertisement (RA) messages. (CVE-2013-0343)
net/ceph/auth_none.c in the Linux kernel through 3.10 allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via an auth_reply message that triggers an attempted build_request operation. (CVE-2013-1059)
The dispatch_discard_io function in drivers/block/xen-blkback/blkback.c in the Xen blkback implementation in the Linux kernel before 3.10.5 allows guest OS users to cause a denial of service (data loss) via filesystem write operations on a read-only disk that supports the (1) BLKIF_OP_DISCARD (aka discard or TRIM) or (2) SCSI UNMAP feature. (CVE-2013-2140)
The HP Smart Array controller disk-array driver and Compaq SMART2 controller disk-array driver in the Linux kernel through 3.9.4 do not initialize certain data structures, which allows local users to obtain sensitive information from kernel memory via (1) a crafted IDAGETPCIINFO command for a /dev/ida device, related to the ida_locked_ioctl function in drivers/block/cpqarray.c or (2) a crafted CCISS_PASSTHRU32 command for a /dev/cciss device, related to the cciss_ioctl32_passthru function in drivers/block/cciss.c. (CVE-2013-2147)
Format string vulnerability in the register_disk function in block/genhd.c in the Linux kernel through 3.9.4 allows local users to gain privileges by leveraging root access and writing format string specifiers to /sys/module/md_mod/parameters/new_array in order to create a crafted /dev/md device name. (CVE-2013-2851)
Multiple array index errors in drivers/hid/hid-core.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11 allow physically proximate attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted device that provides an invalid Report ID (CVE-2013-2888).
drivers/hid/hid-zpff.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_ZEROPLUS is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device (CVE-2013-2889).
drivers/hid/hid-steelseries.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_STEELSERIES is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device. (CVE-2013-2891)
drivers/hid/hid-pl.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_PANTHERLORD is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device (CVE-2013-2892).
The Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_LOGITECH_FF, CONFIG_LOGIG940_FF, or CONFIG_LOGIWHEELS_FF is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device, related to (1) drivers/hid/hid-lgff.c, (2) drivers/hid/hid-lg3ff.c, and (3) drivers/hid/hid-lg4ff.c (CVE-2013-2893).
drivers/hid/hid-lenovo-tpkbd.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_LENOVO_TPKBD is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device. (CVE-2013-2894)
drivers/hid/hid-logitech-dj.c in the Human Interface Device (HID) subsystem in the Linux kernel through…
- Record
MGASA-2013-0374- Updated
- 2026-11-02
OSVMGASA-2013-0375No score
Updated kernel-vserver packages fix security vulnerabilities
This kernel-vserver update provides an update to the 3.10 longterm branch, currently 3.10.24 and fixes the following security issues:
The ipv6_create_tempaddr function in net/ipv6/addrconf.c in the Linux kernel through 3.10 does not properly handle problems with the generation of IPv6 temporary addresses, which allows remote attackers to cause a denial of service (excessive retries and address-generation outage), and consequently obtain sensitive information, via ICMPv6 Router Advertisement (RA) messages. (CVE-2013-0343)
net/ceph/auth_none.c in the Linux kernel through 3.10 allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via an auth_reply message that triggers an attempted build_request operation. (CVE-2013-1059)
The dispatch_discard_io function in drivers/block/xen-blkback/blkback.c in the Xen blkback implementation in the Linux kernel before 3.10.5 allows guest OS users to cause a denial of service (data loss) via filesystem write operations on a read-only disk that supports the (1) BLKIF_OP_DISCARD (aka discard or TRIM) or (2) SCSI UNMAP feature. (CVE-2013-2140)
The HP Smart Array controller disk-array driver and Compaq SMART2 controller disk-array driver in the Linux kernel through 3.9.4 do not initialize certain data structures, which allows local users to obtain sensitive information from kernel memory via (1) a crafted IDAGETPCIINFO command for a /dev/ida device, related to the ida_locked_ioctl function in drivers/block/cpqarray.c or (2) a crafted CCISS_PASSTHRU32 command for a /dev/cciss device, related to the cciss_ioctl32_passthru function in drivers/block/cciss.c. (CVE-2013-2147)
Format string vulnerability in the register_disk function in block/genhd.c in the Linux kernel through 3.9.4 allows local users to gain privileges by leveraging root access and writing format string specifiers to /sys/module/md_mod/parameters/new_array in order to create a crafted /dev/md device name. (CVE-2013-2851)
Multiple array index errors in drivers/hid/hid-core.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11 allow physically proximate attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted device that provides an invalid Report ID (CVE-2013-2888).
drivers/hid/hid-zpff.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_ZEROPLUS is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device (CVE-2013-2889).
drivers/hid/hid-steelseries.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_STEELSERIES is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device. (CVE-2013-2891)
drivers/hid/hid-pl.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_PANTHERLORD is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device (CVE-2013-2892).
The Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_LOGITECH_FF, CONFIG_LOGIG940_FF, or CONFIG_LOGIWHEELS_FF is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device, related to (1) drivers/hid/hid-lgff.c, (2) drivers/hid/hid-lg3ff.c, and (3) drivers/hid/hid-lg4ff.c (CVE-2013-2893).
drivers/hid/hid-lenovo-tpkbd.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_LENOVO_TPKBD is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device. (CVE-2013-2894)
drivers/hid/hid-logitech-dj.c in the Human Interface Device (HID) subsystem in the Linux kernel through…
- Record
MGASA-2013-0375- Updated
- 2026-11-02
OSVUBUNTU-CVE-2013-6381No score
Buffer overflow in the qeth_snmp_command function in drivers/s390/net/qeth_core_main.c in the Linux kernel through 3.12.1 allows local users to cause a denial of service or possibly have unspecified other impact via an SNMP ioctl call with a length value that is incompatible with the command-buffer size.
- Record
UBUNTU-CVE-2013-6381- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
rhn.redhat.com/errata/RHSA-2014-0159.html
openwall.com/lists/oss-security/2013/11/22/5
bugzilla.redhat.com/show_bug.cgi?id=1033600
git.kernel.org?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6fb392b1a63ae36c31f62bc3fc8630b49d602b62
securityfocus.com/bid/63890
Show 111 moreShow less
github.com/torvalds/linux/commit/6fb392b1a63ae36c31f62bc3fc8630b49d602b62
nvd.nist.gov/vuln/detail/CVE-2013-6381
access.redhat.com/errata/RHSA-2014:0159
security-tracker.debian.org/tracker/CVE-2013-6381
advisories.mageia.org/MGASA-2013-0371.html
bugs.mageia.org/show_bug.cgi?id=11463
kernelnewbies.org/Linux_3.9
kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.10.1
security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0159.json
cve.org/CVERecord?id=CVE-2013-2929
support.amd.com/TechDocs/51810_16h_00h-0Fh_Rev_Guide.pdf
xenbits.xenproject.org/xsa/advisory-82.html
ubuntu.com/security/CVE-2013-6381
Left out here: the rest of 5 source descriptions. The JSON record has them.