CVE-2019-13049 - An integer wrap in kernel/sys/syscall.c in ToaruOS 1.10.10 allows users to map arbitrary kernel pages into userland process space via TOARU_SYS_FUNC_MMAP, leading to escalation of privileges

Back Back to CVE browser

HIGH

An integer wrap in kernel/sys/syscall.c in ToaruOS 1.10.10 allows users to map arbitrary kernel pages into userland process space via TOARU_SYS_FUNC_MMAP, leading to escalation of privileges

Published Jun 29, 2019

7.8

HIGH

CVSS 3.0

EPSS 0.52%

Description

An integer wrap in kernel/sys/syscall.c in ToaruOS 1.10.10 allows users to map arbitrary kernel pages into userland process space via TOARU_SYS_FUNC_MMAP, leading to escalation of privileges.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-190

Integer Overflow

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-4609
Advisory
https://github.com/mehsauce/kowasuos/blob/master/exploits/kowasu-sysfunc-revenge.c
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-4609		Advisory
https://github.com/mehsauce/kowasuos/blob/master/exploits/kowasu-sysfunc-revenge.c		x_refsource_MISCExploitThird Party Advisory