Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2013-4587

Description

Array index error in the kvm_vm_ioctl_create_vcpu function in virt/kvm/kvm_main.c in the KVM subsystem in the Linux kernel through 3.12.5 allows local users to gain privileges via a large id value.

POC

Reference

- http://www.ubuntu.com/usn/USN-2129-1

- http://www.ubuntu.com/usn/USN-2136-1

- http://www.ubuntu.com/usn/USN-2139-1

Github

No PoCs found on GitHub currently.