Oval Definition:oval:com.ubuntu.precise:def:20131819000
Revision Date:2013-03-06Version:1
Title:CVE-2013-1819 on Ubuntu 12.04 LTS (precise) - low.
Description:The _xfs_buf_find function in fs/xfs/xfs_buf.c in the Linux kernel before 3.7.6 does not validate block numbers, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by leveraging the ability to mount an XFS filesystem containing a metadata inode with an invalid extent map. A failure to validate block numbers was discovered in the Linux kernel's implementation of the XFS filesystem. A local user can cause a denial of service (system crash) if they can mount, or cause to be mounted a corrupted or special crafted XFS filesystem.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2013-1819
Platform(s):Ubuntu 12.04 LTS
Product(s):
Definition Synopsis
  • Ubuntu 12.04 LTS (precise) is installed.
  • AND Package Information
  • While related to the CVE in some way, a decision has been made to ignore it (note: 'was in USN-1968-1/3.2.0-54.82 reverted minor priority CVE with high risk of regression in backport').
  • OR While related to the CVE in some way, a decision has been made to ignore it (note: 'minor priority CVE with high risk of regression in backport').
  • OR While related to the CVE in some way, a decision has been made to ignore it (note: 'abandoned').
  • OR While related to the CVE in some way, a decision has been made to ignore it (note: 'abandoned').
  • OR While related to the CVE in some way, a decision has been made to ignore it (note: 'abandoned').
  • OR While related to the CVE in some way, a decision has been made to ignore it (note: 'was in USN-1970-1/3.5.0-41.64~precise1 reverted minor priority CVE with high risk of regression in backport').
  • OR NOT While related to the CVE in some way, the 'linux-lts-raring' package in precise is not affected (note: '3.8.0-19.30~precise1').
  • OR NOT While related to the CVE in some way, the 'linux-lts-trusty' package in precise is not affected (note: '3.13.0-24.46~precise1').
  • OR While related to the CVE in some way, a decision has been made to ignore it (note: 'abandoned').
  • OR While related to the CVE in some way, a decision has been made to ignore it (note: 'was in USN-1969-1/3.2.0-1438.57 reverted minor priority CVE with high risk of regression in backport').
  • BACK