SecuritySpace - CVE-2013-6282

Vulnerability Search		Search 324607 CVE descriptions and 146377 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2013-6282

Description: The (1) get_user and (2) put_user API functions in the Linux kernel before 3.5.5 on the v6k and v7 ARM platforms do not validate certain addresses, which allows attackers to read or modify the contents of arbitrary kernel memory locations via a crafted application, as exploited in the wild against Android devices in October and November 2013.

Test IDs: None available

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2013-6282
BugTraq ID: 63734
http://www.securityfocus.com/bid/63734
https://www.exploit-db.com/exploits/40975/
http://www.openwall.com/lists/oss-security/2013/11/14/11
http://www.ubuntu.com/usn/USN-2067-1

CVE ID:	CVE-2013-6282
Description:	The (1) get_user and (2) put_user API functions in the Linux kernel before 3.5.5 on the v6k and v7 ARM platforms do not validate certain addresses, which allows attackers to read or modify the contents of arbitrary kernel memory locations via a crafted application, as exploited in the wild against Android devices in October and November 2013.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2013-6282 BugTraq ID: 63734 http://www.securityfocus.com/bid/63734 https://www.exploit-db.com/exploits/40975/ http://www.openwall.com/lists/oss-security/2013/11/14/11 http://www.ubuntu.com/usn/USN-2067-1