CVE-2013-0313
MediumThe evm_update_evmxattr function in security/integrity/evm/evm_crypto.c in the Linux kernel before 3.7.5, when the Extended Verification Module (EVM) is enabled, allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via an attempted removexattr operation on an inode of a sockfs filesystem.
CVSS 2.0 score
6.2
AV:L/AC:H/Au:N/C:C/I:C/A:C
References
5 totalFrequently asked questions
-
What is CVE-2013-0313?
CVE-2013-0313 is a Medium severity Linux kernel vulnerability with a CVSS score of 6.2 out of 10 . CVE-2013-0313 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
-
What is the CVSS score for CVE-2013-0313?
CVE-2013-0313 has a CVSS score of 6.2 out of 10, rated Medium severity (CVSS 2.0). The vector string is
AV:L/AC:H/Au:N/C:C/I:C/A:C. -
Is there a patch available for CVE-2013-0313?
Monitor the NIST NVD and your Linux distribution's security advisories for CVE-2013-0313 patch availability.
-
Is CVE-2013-0313 actively exploited?
No. CVE-2013-0313 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.