VDB
CERTA-2013-ALE-005
CERTA-2013-ALE-005
PUBLISHED
CVSS 8.399999618530273 HIGH
Record from circl · Published December 27, 2012
Une vulnérabilité a été corrigée dans <span class="textit">le noyau Linux</span>. Elle permet à un attaquant de provoquer une élévation de privilèges. Un code d'exploitation est disponible publiquement et activement utilisé.
Risk scores
CVSS 3.1
8.399999618530273
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
Timeline
- Dec 27, 2012 CVE Published
- Jun 11, 2013 PoC Published (8 in total, the first dated here)
- Apr 18, 2026 Distribution Patch (6 in total, the first dated here)
- Apr 18, 2026 Security Advisory (5 in total, the first dated here)
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln CERTA-2013-ALE-005
vulnetix vdb fixes CERTA-2013-ALE-005
Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/CERTA-2013-ALE-005/fixes/registry"
The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- openSUSE-SU-2013:0847 vendor-advisory
- [linux-kernel] 20130413 Re: sw_perf_event_destroy() oops while fuzzing mailing-list
- [linux-kernel] 20130412 sw_perf_event_destroy() oops while fuzzing mailing-list
- USN-1826-1 vendor-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=962792 url
- https://github.com/torvalds/linux/commit/8176cced706b5e5d15887584150764894e94e02f url
- http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.8.9 url
- USN-1828-1 vendor-advisory
- USN-1827-1 vendor-advisory
- 93361 vdb
- 33589 exploit
- http://news.ycombinator.com/item?id=5703758 url
- [oss-security] 20130514 Re: CVE Request: linux kernel perf out-of-bounds access mailing-list
- SUSE-SU-2013:0819 vendor-advisory
- http://twitter.com/djrbliss/statuses/334301992648331267 url
- USN-1825-1 vendor-advisory
- openSUSE-SU-2013:0951 vendor-advisory
- MDVSA-2013:176 vendor-advisory
- [CentOS-announce] 20130517 CESA-2013:0830 Important CentOS 6 kernel Update mailing-list
- [linux-kernel] 20130412 Re: sw_perf_event_destroy() oops while fuzzing mailing-list
…and 10 more