The log_prefix function in kernel/printk.c in the Linux kernel 3.x before 3.4.33 does not properly remove a prefix string from a syslog header, which allows local users to cause a denial of service (buffer overflow and system crash) by leveraging /dev/kmsg write access and triggering a call_console_drivers function call.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published: 2013-02-28T19:00:00

Updated: 2024-08-06T15:13:32.768Z

Reserved: 2013-02-19T00:00:00

Link: CVE-2013-1772

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2013-02-28T19:55:01.607

Modified: 2013-08-22T06:51:23.713

Link: CVE-2013-1772

cve-icon Redhat

Severity : Low

Publid Date: 2013-02-22T00:00:00Z

Links: CVE-2013-1772 - Bugzilla