{"id":"CVE-2013-4512","aliases":["DEBIAN-CVE-2013-4512","DSA-2906-1","EUVD-2013-4372","GHSA-4m58-4fpp-rp2c","UBUNTU-CVE-2013-4512"],"status":"published","title":"Buffer overflow in the exitcode_proc_write function in arch/um/kernel/exitcode.c in the Linux...","description":"Buffer overflow in the exitcode_proc_write function in arch/um/kernel/exitcode.c in the Linux kernel before 3.12 allows local users to cause a denial of service or possibly have unspecified other impact by leveraging root privileges for a write operation.","severity":{"version":"2.0","score":4.7,"vector":"AV:L/AC:M/Au:N/C:N/I:N/A:C","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00476,"percentile":0.41407,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-119"],"published":"2013-11-12T01:00:00Z","modified":"2026-09-01T20:03:18Z","fixes":[{"ecosystem":"Debian:12","package":"linux","fixed_in":["3.11.8-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"linux","fixed_in":["3.11.8-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"linux","fixed_in":["3.11.8-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.8-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.8-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.8-1"}]}]},{"source":"osv","ecosystem":"Debian:6.0","package":"linux-2.6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.32-48squeeze5"}]}],"versions":["2.6.32-30","2.6.32-30+m68k.5","2.6.32-31","2.6.32-31~bpo50+1","2.6.32-32","2.6.32-33","2.6.32-34","2.6.32-34squeeze1","2.6.32-35","2.6.32-35squeeze1","2.6.32-35squeeze2","2.6.32-35~bpo50+1","2.6.32-36","2.6.32-37","2.6.32-38","2.6.32-39","2.6.32-39squeeze1","2.6.32-40","2.6.32-41","2.6.32-41squeeze2","2.6.32-42","2.6.32-43","2.6.32-44","2.6.32-45","2.6.32-46","2.6.32-46squeeze1","2.6.32-47","2.6.32-48","2.6.32-48squeeze1","2.6.32-48squeeze3","2.6.32-48squeeze4"],"bundled":29}],"products":[{"vendor":"linux","product":"linux_kernel"}],"references":[{"url":"https://www.kernel.org/pub/linux/kernel/v3.x/patch-3.12.bz2","tags":["x_refsource_CONFIRM","x_transferred","Patch","fix"]},{"url":"http://www.securityfocus.com/bid/63510","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"http://www.openwall.com/lists/oss-security/2013/11/04/22","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=201f99f170df14ba52ea4c52847779042b7a623b","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://github.com/torvalds/linux/commit/201f99f170df14ba52ea4c52847779042b7a623b","tags":["x_refsource_CONFIRM","x_transferred","Exploit","Patch","evidence","fix"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-4512"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=201f99f170df14ba52ea4c52847779042b7a623b"},{"url":"https://github.com/advisories/GHSA-4m58-4fpp-rp2c"},{"url":"https://security-tracker.debian.org/tracker/CVE-2013-4512","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2013-4512","tags":["report"]},{"url":"https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=201f99f170df14ba52ea4c52847779042b7a623b","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-4512","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2013-4512","description":"Buffer overflow in the exitcode_proc_write function in arch/um/kernel/exitcode.c in the Linux kernel before 3.12 allows local users to cause a denial of service or possibly have unspecified other impact by leveraging root privileges for a write operation.","status":"published","published":"2013-11-12T01:00:00Z","modified":"2024-08-06T16:45:14.801Z","updated_at":"2026-11-02T14:34:57.499208Z"}],"euvd":[{"id":"EUVD-2013-4372","description":"Buffer overflow in the exitcode_proc_write function in arch/um/kernel/exitcode.c in the Linux kernel before 3.12 allows local users to cause a denial of service or possibly have unspecified other impact by leveraging root privileges for a write operation.","status":"published","published":"2013-11-12T01:00:00Z","modified":"2024-08-06T16:45:14Z","updated_at":"2026-11-03T01:56:31.667445Z"}],"ghsa":[{"id":"GHSA-4m58-4fpp-rp2c","title":"Buffer overflow in the exitcode_proc_write function in arch/um/kernel/exitcode.c in the Linux...","description":"Buffer overflow in the exitcode_proc_write function in arch/um/kernel/exitcode.c in the Linux kernel before 3.12 allows local users to cause a denial of service or possibly have unspecified other impact by leveraging root privileges for a write operation.","status":"published","published":"2022-05-17T03:13:01Z","modified":"2023-02-21T05:06:32Z","cwes":["CWE-119"],"updated_at":"2026-11-02T14:54:11.906282Z"}],"nvd":[{"id":"CVE-2013-4512","description":"Buffer overflow in the exitcode_proc_write function in arch/um/kernel/exitcode.c in the Linux kernel before 3.12 allows local users to cause a denial of service or possibly have unspecified other impact by leveraging root privileges for a write operation.","status":"published","published":"2013-11-12T14:35:12.277Z","modified":"2026-06-16T23:57:21.687Z","cvss":[{"version":"2.0","score":4.7,"vector":"AV:L/AC:M/Au:N/C:N/I:N/A:C","level":"medium","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:02:40.988689Z"}],"osv":[{"id":"CVE-2013-4512","description":"Buffer overflow in the exitcode_proc_write function in arch/um/kernel/exitcode.c in the Linux kernel before 3.12 allows local users to cause a denial of service or possibly have unspecified other impact by leveraging root privileges for a write operation.","status":"published","published":"2013-11-12T14:35:12Z","modified":"2026-04-10T03:42:59.843015Z","updated_at":"2026-11-02T15:43:59.09154Z"},{"id":"DEBIAN-CVE-2013-4512","description":"Buffer overflow in the exitcode_proc_write function in arch/um/kernel/exitcode.c in the Linux kernel before 3.12 allows local users to cause a denial of service or possibly have unspecified other impact by leveraging root privileges for a write operation.","status":"published","published":"2013-11-12T14:35:12.277Z","modified":"2026-09-01T20:03:18.337108182Z","updated_at":"2026-11-02T15:45:25.514579Z"},{"id":"DSA-2906-1","title":"linux-2.6 - several","status":"published","published":"2014-04-24T00:00:00Z","modified":"2026-03-09T01:19:53.908925Z","updated_at":"2026-11-02T15:46:15.843838Z"},{"id":"UBUNTU-CVE-2013-4512","description":"Buffer overflow in the exitcode_proc_write function in arch/um/kernel/exitcode.c in the Linux kernel before 3.12 allows local users to cause a denial of service or possibly have unspecified other impact by leveraging root privileges for a write operation.","status":"withdrawn","published":"2013-11-12T14:35:00Z","modified":"2025-07-16T08:10:47.014088Z","updated_at":"2026-11-02T15:54:07.421078Z"}]}}