Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2013-6282

The (1) get_user and (2) put_user API functions in the Linux kernel before 3.5.5 on the v6k and v7 ARM platforms do not validate certain addresses, which allows attackers to read or modify the contents of arbitrary kernel memory locations via a crafted application, as exploited in the wild against Android devices in October and November 2013.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.469
EPSS Ranking 97.6%
CVSS Severity
CVSS v3 Score 8.8
CVSS v2 Score 7.2
Proposed Action
The get_user and put_user API functions of the Linux kernel fail to validate the target address when being used on ARM v6k/v7 platforms. This allows an application to read and write kernel memory which could lead to privilege escalation.
Ransomware Campaign
Unknown
References
Products affected by CVE-2013-6282


Products
Pricing
Contact Us

Shodan ® - All rights reserved