CVE-2013-4737 Security feature bypass in n/a
Attackers can bypass memory access restrictions in the Linux kernel to escalate privileges by exploiting fixed RWX memory locations.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2013-4737?
CVE-2013-4737 is a critical vulnerability in n/a, published on 15 Feb 2014. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
The CONFIG_STRICT_MEMORY_RWX implementation for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, does not properly consider certain memory sections, which makes it easier for attackers to bypass intended access restrictions by leveraging the presence of RWX memory at a fixed location.
Weakness: CWE-264
Which versions are affected by CVE-2013-4737?
It affects 1 product.
Products include Qualcomm Quic Mobile Station Modem Kernel.
How do I fix CVE-2013-4737?
No fix has been published for CVE-2013-4737 yet. Limit exposure of the affected software until one is available.
Is CVE-2013-4737 being exploited?
There is no known exploitation of CVE-2013-4737 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-826q-29vj-27qh.