CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2013-05-14
Linux Kernel perf_event_open Integer Validation Vulnerability leading to Local Privilege Escalation (CVE-2013-2094)
[Affected Scope] Linux kernel versions 2.6.37 through 3.8.8
[Impact] Local unprivileged users can exploit this vulnerability via a crafted perf_event_open system call to execute arbitrary code with root privileges
[Mitigation] Upgrade the Linux kernel to version 3.8.9 or higher, or restrict unprivileged access to performance events by configuring perf_event_paranoid