UBUNTU-CVE-2013-2207

See a problem?

Source

https://ubuntu.com/security/notices/UBUNTU-CVE-2013-2207

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2013/UBUNTU-CVE-2013-2207.json

JSON Data

https://api.osv.dev/v1/vulns/UBUNTU-CVE-2013-2207

Related

Published

2013-10-09T00:00:00Z

Modified

2013-10-09T00:00:00Z

Summary

[none]

Details

pt_chown in GNU C Library (aka glibc or libc6) before 2.18 does not properly check permissions for tty files, which allows local users to change the permission on the files and obtain access to arbitrary pseudo-terminals by leveraging a FUSE file system.

References

Affected packages

Ubuntu:14.04:LTS / eglibc

Package

Name: eglibc
Purl: pkg:deb/ubuntu/eglibc@2.19-0ubuntu6.8?arch=src?distro=trusty

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.19-0ubuntu6.8

Affected versions

2.*

2.17-93ubuntu4

2.18-0ubuntu1

2.18-0ubuntu2

2.18-0ubuntu4

2.18-0ubuntu5

2.18-0ubuntu6

2.18-0ubuntu7

2.19-0ubuntu2

2.19-0ubuntu3

2.19-0ubuntu4

2.19-0ubuntu5

2.19-0ubuntu6

2.19-0ubuntu6.1

2.19-0ubuntu6.3

2.19-0ubuntu6.4

2.19-0ubuntu6.5

2.19-0ubuntu6.6

2.19-0ubuntu6.7

Ecosystem specific

{
    "availability": "No subscription required",
    "ubuntu_priority": "low",
    "binaries": [
        {
            "multiarch-support": "2.19-0ubuntu6.8",
            "libc6-dev": "2.19-0ubuntu6.8",
            "libc6-udeb-dbgsym": "2.19-0ubuntu6.8",
            "libnss-dns-udeb-dbgsym": "2.19-0ubuntu6.8",
            "libc6-ppc64": "2.19-0ubuntu6.8",
            "libc6-dev-i386": "2.19-0ubuntu6.8",
            "libnss-dns-udeb": "2.19-0ubuntu6.8",
            "libc6-amd64-dbgsym": "2.19-0ubuntu6.8",
            "libc6-dev-amd64": "2.19-0ubuntu6.8",
            "libc6-pic": "2.19-0ubuntu6.8",
            "nscd-dbgsym": "2.19-0ubuntu6.8",
            "nscd": "2.19-0ubuntu6.8",
            "glibc-doc": "2.19-0ubuntu6.8",
            "libc6-ppc64-dbgsym": "2.19-0ubuntu6.8",
            "libc6-armel": "2.19-0ubuntu6.8",
            "libc6-armel-dbgsym": "2.19-0ubuntu6.8",
            "libc6": "2.19-0ubuntu6.8",
            "libc6-dbg": "2.19-0ubuntu6.8",
            "libc-bin": "2.19-0ubuntu6.8",
            "libc6-i386": "2.19-0ubuntu6.8",
            "libc6-udeb": "2.19-0ubuntu6.8",
            "libc6-dev-x32": "2.19-0ubuntu6.8",
            "eglibc-source": "2.19-0ubuntu6.8",
            "libc-bin-dbgsym": "2.19-0ubuntu6.8",
            "libc-dev-bin": "2.19-0ubuntu6.8",
            "libc6-amd64": "2.19-0ubuntu6.8",
            "libc6-x32": "2.19-0ubuntu6.8",
            "libc6-prof": "2.19-0ubuntu6.8",
            "libnss-files-udeb": "2.19-0ubuntu6.8",
            "libc6-dbgsym": "2.19-0ubuntu6.8",
            "libnss-files-udeb-dbgsym": "2.19-0ubuntu6.8",
            "libc6-dev-armel": "2.19-0ubuntu6.8",
            "libc6-dev-ppc64": "2.19-0ubuntu6.8",
            "libc6-i386-dbgsym": "2.19-0ubuntu6.8",
            "libc-dev-bin-dbgsym": "2.19-0ubuntu6.8",
            "libc6-x32-dbgsym": "2.19-0ubuntu6.8"
        }
    ]
}

Ubuntu:16.04:LTS / glibc

Package

Name: glibc
Purl: pkg:deb/ubuntu/glibc@2.23-0ubuntu1?arch=src?distro=xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.23-0ubuntu1

Affected versions

2.*

2.21-0ubuntu4

2.21-0ubuntu5

2.21-0ubuntu6

Ecosystem specific

{
    "availability": "No subscription required",
    "ubuntu_priority": "low",
    "binaries": [
        {
            "libc6-s390-dbgsym": "2.23-0ubuntu1",
            "libc6-dev": "2.23-0ubuntu1",
            "libc6-udeb-dbgsym": "2.23-0ubuntu1",
            "multiarch-support": "2.23-0ubuntu1",
            "libnss-dns-udeb-dbgsym": "2.23-0ubuntu1",
            "libc6-ppc64": "2.23-0ubuntu1",
            "libc6-dev-s390": "2.23-0ubuntu1",
            "libc6-dev-i386": "2.23-0ubuntu1",
            "libnss-dns-udeb": "2.23-0ubuntu1",
            "libc6-amd64-dbgsym": "2.23-0ubuntu1",
            "locales-all": "2.23-0ubuntu1",
            "glibc-source": "2.23-0ubuntu1",
            "libc6-dev-amd64": "2.23-0ubuntu1",
            "libc6-pic": "2.23-0ubuntu1",
            "nscd-dbgsym": "2.23-0ubuntu1",
            "nscd": "2.23-0ubuntu1",
            "glibc-doc": "2.23-0ubuntu1",
            "libc6-ppc64-dbgsym": "2.23-0ubuntu1",
            "libc6-armel": "2.23-0ubuntu1",
            "libc6-dbg": "2.23-0ubuntu1",
            "libc6": "2.23-0ubuntu1",
            "libc6-armel-dbgsym": "2.23-0ubuntu1",
            "libc6-dev-x32": "2.23-0ubuntu1",
            "libc6-i386": "2.23-0ubuntu1",
            "libc6-udeb": "2.23-0ubuntu1",
            "libc-bin": "2.23-0ubuntu1",
            "libc-bin-dbgsym": "2.23-0ubuntu1",
            "libc-dev-bin": "2.23-0ubuntu1",
            "libc6-amd64": "2.23-0ubuntu1",
            "libc6-x32": "2.23-0ubuntu1",
            "libnss-files-udeb": "2.23-0ubuntu1",
            "libnss-files-udeb-dbgsym": "2.23-0ubuntu1",
            "libc6-dbgsym": "2.23-0ubuntu1",
            "libc6-s390": "2.23-0ubuntu1",
            "libc6-dev-armel": "2.23-0ubuntu1",
            "libc6-dev-ppc64": "2.23-0ubuntu1",
            "libc6-i386-dbgsym": "2.23-0ubuntu1",
            "locales": "2.23-0ubuntu1",
            "libc-dev-bin-dbgsym": "2.23-0ubuntu1",
            "libc6-x32-dbgsym": "2.23-0ubuntu1"
        }
    ]
}