ByteOS Network

Vulnerability Details :

CVE-2013-2164

Assigner-redhat

Assigner Org ID-53f830b8-0a3f-465b-8143-3b8a9948e749

Published At-04 Jul, 2013 | 21:00

Updated At-06 Aug, 2024 | 15:27

The mmc_ioctl_cdrom_read_data function in drivers/cdrom/cdrom.c in the Linux kernel through 3.10 allows local users to obtain sensitive information from kernel memory via a read operation on a malfunctioning CD-ROM drive.

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:redhat

Assigner Org ID:53f830b8-0a3f-465b-8143-3b8a9948e749

Published At:04 Jul, 2013 | 21:00

Updated At:06 Aug, 2024 | 15:27

▼CVE Numbering Authority (CNA)

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
http://rhn.redhat.com/errata/RHSA-2013-1166.html	vendor-advisory x_refsource_REDHAT
http://www.ubuntu.com/usn/USN-1913-1	vendor-advisory x_refsource_UBUNTU
http://lists.opensuse.org/opensuse-security-announce/2013-09/msg00003.html	vendor-advisory x_refsource_SUSE
http://rhn.redhat.com/errata/RHSA-2013-1645.html	vendor-advisory x_refsource_REDHAT
http://www.debian.org/security/2013/dsa-2766	vendor-advisory x_refsource_DEBIAN
http://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html	vendor-advisory x_refsource_SUSE
http://git.kernel.org/cgit/linux/kernel/git/next/linux-next.git/commit/drivers/cdrom/cdrom.c?id=050e4b8fb7cdd7096c987a9cd556029c622c7fe2	x_refsource_CONFIRM
http://www.openwall.com/lists/oss-security/2013/06/10/9	mailing-list x_refsource_MLIST
http://lists.opensuse.org/opensuse-security-announce/2013-09/msg00004.html	vendor-advisory x_refsource_SUSE
https://bugzilla.redhat.com/show_bug.cgi?id=973100	x_refsource_CONFIRM
http://www.ubuntu.com/usn/USN-1941-1	vendor-advisory x_refsource_UBUNTU
http://www.ubuntu.com/usn/USN-1942-1	vendor-advisory x_refsource_UBUNTU
http://www.ubuntu.com/usn/USN-1912-1	vendor-advisory x_refsource_UBUNTU

Hyperlink: http://rhn.redhat.com/errata/RHSA-2013-1166.html

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: http://www.ubuntu.com/usn/USN-1913-1

Resource:

vendor-advisory

x_refsource_UBUNTU

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2013-09/msg00003.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: http://rhn.redhat.com/errata/RHSA-2013-1645.html

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: http://www.debian.org/security/2013/dsa-2766

Resource:

vendor-advisory

x_refsource_DEBIAN

Hyperlink: http://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: http://git.kernel.org/cgit/linux/kernel/git/next/linux-next.git/commit/drivers/cdrom/cdrom.c?id=050e4b8fb7cdd7096c987a9cd556029c622c7fe2

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.openwall.com/lists/oss-security/2013/06/10/9

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2013-09/msg00004.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: https://bugzilla.redhat.com/show_bug.cgi?id=973100

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.ubuntu.com/usn/USN-1941-1

Resource:

vendor-advisory

x_refsource_UBUNTU

Hyperlink: http://www.ubuntu.com/usn/USN-1942-1

Resource:

vendor-advisory

x_refsource_UBUNTU

Hyperlink: http://www.ubuntu.com/usn/USN-1912-1

Resource:

vendor-advisory

x_refsource_UBUNTU

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://rhn.redhat.com/errata/RHSA-2013-1166.html	vendor-advisory x_refsource_REDHAT x_transferred
http://www.ubuntu.com/usn/USN-1913-1	vendor-advisory x_refsource_UBUNTU x_transferred
http://lists.opensuse.org/opensuse-security-announce/2013-09/msg00003.html	vendor-advisory x_refsource_SUSE x_transferred
http://rhn.redhat.com/errata/RHSA-2013-1645.html	vendor-advisory x_refsource_REDHAT x_transferred
http://www.debian.org/security/2013/dsa-2766	vendor-advisory x_refsource_DEBIAN x_transferred
http://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html	vendor-advisory x_refsource_SUSE x_transferred
http://git.kernel.org/cgit/linux/kernel/git/next/linux-next.git/commit/drivers/cdrom/cdrom.c?id=050e4b8fb7cdd7096c987a9cd556029c622c7fe2	x_refsource_CONFIRM x_transferred
http://www.openwall.com/lists/oss-security/2013/06/10/9	mailing-list x_refsource_MLIST x_transferred
http://lists.opensuse.org/opensuse-security-announce/2013-09/msg00004.html	vendor-advisory x_refsource_SUSE x_transferred
https://bugzilla.redhat.com/show_bug.cgi?id=973100	x_refsource_CONFIRM x_transferred
http://www.ubuntu.com/usn/USN-1941-1	vendor-advisory x_refsource_UBUNTU x_transferred
http://www.ubuntu.com/usn/USN-1942-1	vendor-advisory x_refsource_UBUNTU x_transferred
http://www.ubuntu.com/usn/USN-1912-1	vendor-advisory x_refsource_UBUNTU x_transferred

Hyperlink: http://rhn.redhat.com/errata/RHSA-2013-1166.html

Resource:

vendor-advisory

x_refsource_REDHAT

x_transferred

Hyperlink: http://www.ubuntu.com/usn/USN-1913-1

Resource:

vendor-advisory

x_refsource_UBUNTU

x_transferred

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2013-09/msg00003.html

Resource:

vendor-advisory

x_refsource_SUSE

x_transferred

Hyperlink: http://rhn.redhat.com/errata/RHSA-2013-1645.html

Resource:

vendor-advisory

x_refsource_REDHAT

x_transferred

Hyperlink: http://www.debian.org/security/2013/dsa-2766

Resource:

vendor-advisory

x_refsource_DEBIAN

x_transferred

Hyperlink: http://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html

Resource:

vendor-advisory

x_refsource_SUSE

x_transferred

Hyperlink: http://git.kernel.org/cgit/linux/kernel/git/next/linux-next.git/commit/drivers/cdrom/cdrom.c?id=050e4b8fb7cdd7096c987a9cd556029c622c7fe2

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://www.openwall.com/lists/oss-security/2013/06/10/9

Resource:

mailing-list

x_refsource_MLIST

x_transferred

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2013-09/msg00004.html

Resource:

vendor-advisory

x_refsource_SUSE

x_transferred

Hyperlink: https://bugzilla.redhat.com/show_bug.cgi?id=973100

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://www.ubuntu.com/usn/USN-1941-1

Resource:

vendor-advisory

x_refsource_UBUNTU

x_transferred

Hyperlink: http://www.ubuntu.com/usn/USN-1942-1

Resource:

vendor-advisory

x_refsource_UBUNTU

x_transferred

Hyperlink: http://www.ubuntu.com/usn/USN-1912-1

Resource:

vendor-advisory

x_refsource_UBUNTU

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:secalert@redhat.com

Published At:04 Jul, 2013 | 21:55

Updated At:11 Apr, 2025 | 00:51

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	2.1	LOW	AV:L/AC:L/Au:N/C:P/I:N/A:N

Type: Primary

Version: 2.0

Base score: 2.1

Base severity: LOW

Vector:

AV:L/AC:L/Au:N/C:P/I:N/A:N

CPE Matches

Linux Kernel Organization, Inc

>>linux_kernel>>3.0

cpe:2.3:o:linux:linux_kernel:3.0:rc1:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>3.0

cpe:2.3:o:linux:linux_kernel:3.0:rc2:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>3.0

cpe:2.3:o:linux:linux_kernel:3.0:rc3:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>3.0

cpe:2.3:o:linux:linux_kernel:3.0:rc4:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>3.0

cpe:2.3:o:linux:linux_kernel:3.0:rc5:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>3.0

cpe:2.3:o:linux:linux_kernel:3.0:rc6:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>3.0

cpe:2.3:o:linux:linux_kernel:3.0:rc7:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>3.0.1

cpe:2.3:o:linux:linux_kernel:3.0.1:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>3.0.2

cpe:2.3:o:linux:linux_kernel:3.0.2:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>3.0.3

cpe:2.3:o:linux:linux_kernel:3.0.3:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>3.0.4

cpe:2.3:o:linux:linux_kernel:3.0.4:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>3.0.5

cpe:2.3:o:linux:linux_kernel:3.0.5:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>3.0.6

cpe:2.3:o:linux:linux_kernel:3.0.6:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>3.0.7

cpe:2.3:o:linux:linux_kernel:3.0.7:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>3.0.8

cpe:2.3:o:linux:linux_kernel:3.0.8:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>3.0.9

cpe:2.3:o:linux:linux_kernel:3.0.9:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>3.0.10

cpe:2.3:o:linux:linux_kernel:3.0.10:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>3.0.11

cpe:2.3:o:linux:linux_kernel:3.0.11:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>3.0.12

cpe:2.3:o:linux:linux_kernel:3.0.12:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>3.0.13

cpe:2.3:o:linux:linux_kernel:3.0.13:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>3.0.14

cpe:2.3:o:linux:linux_kernel:3.0.14:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>3.0.15

cpe:2.3:o:linux:linux_kernel:3.0.15:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>3.0.16

cpe:2.3:o:linux:linux_kernel:3.0.16:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>3.0.17

cpe:2.3:o:linux:linux_kernel:3.0.17:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>3.0.18

cpe:2.3:o:linux:linux_kernel:3.0.18:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>3.0.19

cpe:2.3:o:linux:linux_kernel:3.0.19:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>3.0.20

cpe:2.3:o:linux:linux_kernel:3.0.20:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>3.0.21

cpe:2.3:o:linux:linux_kernel:3.0.21:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>3.0.22

cpe:2.3:o:linux:linux_kernel:3.0.22:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>3.0.23

cpe:2.3:o:linux:linux_kernel:3.0.23:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>3.0.24

cpe:2.3:o:linux:linux_kernel:3.0.24:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>3.0.25

cpe:2.3:o:linux:linux_kernel:3.0.25:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>3.0.26

cpe:2.3:o:linux:linux_kernel:3.0.26:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>3.0.27

cpe:2.3:o:linux:linux_kernel:3.0.27:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>3.0.28

cpe:2.3:o:linux:linux_kernel:3.0.28:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>3.0.29

cpe:2.3:o:linux:linux_kernel:3.0.29:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>3.0.30

cpe:2.3:o:linux:linux_kernel:3.0.30:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>3.0.31

cpe:2.3:o:linux:linux_kernel:3.0.31:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>3.0.32

cpe:2.3:o:linux:linux_kernel:3.0.32:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>3.0.33

cpe:2.3:o:linux:linux_kernel:3.0.33:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>3.0.34

cpe:2.3:o:linux:linux_kernel:3.0.34:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>3.0.35

cpe:2.3:o:linux:linux_kernel:3.0.35:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>3.0.36

cpe:2.3:o:linux:linux_kernel:3.0.36:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>3.0.37

cpe:2.3:o:linux:linux_kernel:3.0.37:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>3.0.38

cpe:2.3:o:linux:linux_kernel:3.0.38:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>3.0.39

cpe:2.3:o:linux:linux_kernel:3.0.39:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>3.0.40

cpe:2.3:o:linux:linux_kernel:3.0.40:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>3.0.41

cpe:2.3:o:linux:linux_kernel:3.0.41:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>3.0.42

cpe:2.3:o:linux:linux_kernel:3.0.42:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>3.0.43

cpe:2.3:o:linux:linux_kernel:3.0.43:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-200	Primary	nvd@nist.gov

CWE ID: CWE-200

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://git.kernel.org/cgit/linux/kernel/git/next/linux-next.git/commit/drivers/cdrom/cdrom.c?id=050e4b8fb7cdd7096c987a9cd556029c622c7fe2	secalert@redhat.com	Exploit Patch
http://lists.opensuse.org/opensuse-security-announce/2013-09/msg00003.html	secalert@redhat.com	N/A
http://lists.opensuse.org/opensuse-security-announce/2013-09/msg00004.html	secalert@redhat.com	N/A
http://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html	secalert@redhat.com	N/A
http://rhn.redhat.com/errata/RHSA-2013-1166.html	secalert@redhat.com	N/A
http://rhn.redhat.com/errata/RHSA-2013-1645.html	secalert@redhat.com	N/A
http://www.debian.org/security/2013/dsa-2766	secalert@redhat.com	N/A
http://www.openwall.com/lists/oss-security/2013/06/10/9	secalert@redhat.com	Patch
http://www.ubuntu.com/usn/USN-1912-1	secalert@redhat.com	N/A
http://www.ubuntu.com/usn/USN-1913-1	secalert@redhat.com	N/A
http://www.ubuntu.com/usn/USN-1941-1	secalert@redhat.com	N/A
http://www.ubuntu.com/usn/USN-1942-1	secalert@redhat.com	N/A
https://bugzilla.redhat.com/show_bug.cgi?id=973100	secalert@redhat.com	N/A
http://git.kernel.org/cgit/linux/kernel/git/next/linux-next.git/commit/drivers/cdrom/cdrom.c?id=050e4b8fb7cdd7096c987a9cd556029c622c7fe2	af854a3a-2127-422b-91ae-364da2661108	Exploit Patch
http://lists.opensuse.org/opensuse-security-announce/2013-09/msg00003.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://lists.opensuse.org/opensuse-security-announce/2013-09/msg00004.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://rhn.redhat.com/errata/RHSA-2013-1166.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://rhn.redhat.com/errata/RHSA-2013-1645.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.debian.org/security/2013/dsa-2766	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.openwall.com/lists/oss-security/2013/06/10/9	af854a3a-2127-422b-91ae-364da2661108	Patch
http://www.ubuntu.com/usn/USN-1912-1	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.ubuntu.com/usn/USN-1913-1	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.ubuntu.com/usn/USN-1941-1	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.ubuntu.com/usn/USN-1942-1	af854a3a-2127-422b-91ae-364da2661108	N/A
https://bugzilla.redhat.com/show_bug.cgi?id=973100	af854a3a-2127-422b-91ae-364da2661108	N/A