Main
Vulnerability Database
Exploits
ID:3713 - Exploit for Input validation error in Linux kernel - CVE-2013-2094
ID:3713 - Exploit for Input validation error in Linux kernel - CVE-2013-2094
Published: August 4, 2020
Vulnerability identifier: #VU33902
Vulnerability risk: High
CVE-ID: CVE-2013-2094
CWE-ID: CWE-20
Exploitation vector: Remote access
Vulnerable software:
Linux kernel
Linux kernel
Link to public exploit:
Vulnerability description
The vulnerability allows a remote non-authenticated attacker to execute arbitrary code.
The perf_swevent_init function in kernel/events/core.c in the Linux kernel before 3.8.9 uses an incorrect integer data type, which allows local users to gain privileges via a crafted perf_event_open system call.
Remediation
Install update from vendor's website.