CVE-2013-2239 - CVE House
Back to Database
Status published Medium CVE-2013-2239

vzkernel before 042stab080.2 in the OpenVZ modification for the Linux...

Vulnerability Description

vzkernel before 042stab080.2 in the OpenVZ modification for the Linux kernel 2.6.32 does not initialize certain length variables, which allows local users to obtain sensitive information from kernel stack memory via (1) a crafted ploop driver ioctl call, related to the ploop_getdevice_ioc function in drivers/block/ploop/dev.c, or (2) a crafted quotactl system call, related to the compat_quotactl function in fs/quota/quota.c.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2013-2239

Credits & Attribution

No credits recorded in the NVD database.

References

More from openvz

View All →
CVE-2015-6927
vzctl before 4.9.4 determines the virtual environment (VE) layout based...
Low 3.6
CVE-2014-3519
The open_by_handle_at function in vzkernel before 042stab090.5 in the OpenVZ...
Medium 6.5

Affected Vendor

Affected Software

vzkernel
Vulnerable Versions:
2.6.32

Timeline

Official Publish: November 12th, 2013
Last Modified: August 6th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.