CVE-2013-1773: Buffer Overflow
Buffer overflow in the VFAT filesystem implementation in the Linux kernel before 3.3 allows local users to gain privileges or cause a denial of service (system crash) via a VFAT write operation on a filesystem with the utf8 mount option, which is not properly handled during UTF-8 to UTF-16 conversion.
Other sources
Linux kernel built with support to VFAT file system is vulnerable to a buffer overflow flaw which happens when converting UTF8 character string to UTF16 via function: utf8stoutf16s.
A local user able to mount, or with access to, a FAT file system with the "utf8=1" option could use this flaw to crash the system or, potentially, to escalate their privileges.
Upstream fix: -> https://git.kernel.org/linus/0720a06a7518c9d0c0125bd5d1f3b6264c55c3dd
Reference: -> http://www.openwall.com/lists/oss-security/2013/02/26/5 -> http://www.exploit-db.com/exploits/23248/
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2013-1773?
CVE-2013-1773 has a high severity rating due to the potential for privilege escalation and system crashes.
How do I fix CVE-2013-1773?
Fix CVE-2013-1773 by upgrading your Linux kernel to version 3.3 or later.
Which systems are affected by CVE-2013-1773?
CVE-2013-1773 affects multiple versions of the Linux kernel prior to 3.3 across various distributions.
What are the potential impacts of CVE-2013-1773?
The potential impacts of CVE-2013-1773 include local privilege escalation and denial of service due to system crashes.
Is there a workaround for CVE-2013-1773?
Currently, the recommended approach is to upgrade the kernel, as no specific workaround mitigates CVE-2013-1773.