CVE-2013-6381

MediumCVSS 6.9/10Last modified Jun 17, 2026

Description

Buffer overflow in the qeth_snmp_command function in drivers/s390/net/qeth_core_main.c in the Linux kernel through 3.12.1 allows local users to cause a denial of service or possibly have unspecified other impact via an SNMP ioctl call with a length value that is incompatible with the command-buffer size.

Metrics

CVSS 2.0 6.9/10AV:L/AC:M/Au:N/C:C/I:C/A:C

Weakness enumeration

CWE-119

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6fb392b1a63ae36c31f62bc3fc8630b49d602b62Broken Link
http://rhn.redhat.com/errata/RHSA-2014-0159.htmlThird Party Advisory, VDB Entry
http://rhn.redhat.com/errata/RHSA-2014-0284.htmlThird Party Advisory, VDB Entry
http://rhn.redhat.com/errata/RHSA-2014-0285.htmlThird Party Advisory, VDB Entry
http://www.openwall.com/lists/oss-security/2013/11/22/5Mailing List
http://www.securityfocus.com/bid/63890Third Party Advisory, VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1033600Issue Tracking
https://github.com/torvalds/linux/commit/6fb392b1a63ae36c31f62bc3fc8630b49d602b62Exploit, Patch
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6fb392b1a63ae36c31f62bc3fc8630b49d602b62Broken Link
http://rhn.redhat.com/errata/RHSA-2014-0159.htmlThird Party Advisory, VDB Entry
http://rhn.redhat.com/errata/RHSA-2014-0284.htmlThird Party Advisory, VDB Entry
http://rhn.redhat.com/errata/RHSA-2014-0285.htmlThird Party Advisory, VDB Entry
http://www.openwall.com/lists/oss-security/2013/11/22/5Mailing List
http://www.securityfocus.com/bid/63890Third Party Advisory, VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1033600Issue Tracking
https://github.com/torvalds/linux/commit/6fb392b1a63ae36c31f62bc3fc8630b49d602b62Exploit, Patch

Timeline

Published: Nov 27, 2013
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2013

CVE-2013-63824.0Multiple buffer underflows in the XFS implementation in the Linux kernel through 3.12.1 allow local users to cause a denial of service (memo CVE-2013-63836.9The aac_compat_ioctl function in drivers/scsi/aacraid/linit.c in the Linux kernel before 3.11.8 does not require the CAP_SYS_RAWIO capabilit CVE-2013-63841.9(1) impl_db2.py and (2) impl_mongodb.py in OpenStack Ceilometer 2013.2 and earlier, when the logging level is set to INFO, logs the connecti CVE-2013-63855.1The form API in Drupal 6.x before 6.29 and 7.x before 7.24, when used with unspecified third-party modules, performs form validation even wh CVE-2013-63866.8Drupal 6.x before 6.29 and 7.x before 7.24 uses the PHP mt_rand function to generate random numbers, which uses predictable seeds and allows CVE-2013-63872.1Cross-site scripting (XSS) vulnerability in the Image module in Drupal 7.x before 7.24 allows remote authenticated users with certain permis CVE-2013-63884.3Cross-site scripting (XSS) vulnerability in the Color module in Drupal 7.x before 7.24 allows remote attackers to inject arbitrary web scrip CVE-2013-63895.8Open redirect vulnerability in the Overlay module in Drupal 7.x before 7.24 allows remote attackers to redirect users to arbitrary web sites CVE-2013-63915.8The ec2tokens API in OpenStack Identity (Keystone) before Havana 2013.2.1 and Icehouse before icehouse-2 does not return a trust-scoped toke CVE-2013-63924.9The genlock_dev_ioctl function in genlock.c in the Genlock driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) And CVE-2013-63936.8The yaml_parser_scan_tag_uri function in scanner.c in LibYAML before 0.1.5 performs an incorrect cast, which allows remote attackers to caus CVE-2013-63942.1Percona XtraBackup before 2.1.6 uses a constant string for the initialization vector (IV), which makes it easier for local users to defeat c