7.2

CVE-2013-1813: busybox

CVSS: 7.2v2.0HighModified
AliasesMGASA-2013-0358RHSA-2013:1732UBUNTU-CVE-2013-1813
Published 23-11-2013Last modified 06-08-2024
Open JSON

Vulnerability summary

CVE-2013-1813 is a high (CVSS 7.2) vulnerability in busybox. EPSS estimates a 0.62% chance of exploitation in the next 30 days, higher than 48.8% of scored vulnerabilities. 1 public exploit is recorded.

Overall risk
39/100
0100
Medium · default modelHow is this calculated?
CVSS score
7.2/10
010
High · v2.0 (NVD)
EPSS score
0.62%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits1reference

Timeline

  1. 23-11-2013
    PublishedVulnerability first disclosed.
  2. 06-08-2024
    Last modifiedVulnerability information updated.

Description

util-linux/mdev.c in BusyBox before 1.21.0 uses 0777 permissions for parent directories when creating nested directories under /dev/, which allows local users to have unknown impact and attack vectors.

CVSS metrics

1 score · 1 source · 1 version

EPSS trend

Probability

0.62%

Chance of exploitation in the next 30 days

Percentile

49%

Versus all other CVEs

30-day change

0.00 pp

From 0.62% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.62%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found
  • referenceUnverified

    Exploit Reference (git.busybox.net)

    Maturity: unknown

Weaknesses

CWE · root cause

Affected systems

Redhat3 products
  • enterprise_linuxEOL6.0
  • busybox< 1:1.15.1-20.el6
  • busybox-petitboot< 1:1.15.1-20.el6
Busybox1 product
  • busybox≤ 1.20.2 | 0.38 | 0.39 | 0.40 | 0.41 | 0.42 | 0.43 | 0.45 | 0.46 | 0.47 | 0.48 | 0.49 | 0.50 | 0.51 | 0.52 | 0.60.0 | 0.60.1 | 0.60.2 | 0.60.3 | 0.60.4 | 0.60.5 | 1.00 | 1.01 | 1.1.0 | 1.1.1 | 1.1.2 | 1.1.3 | 1.2.0 | 1.2.1 | 1.2.2 | 1.2.2.1 | 1.3.0 | 1.3.1 | 1.3.2 | 1.4.0 | 1.4.1 | 1.4.2 | 1.5.0 | 1.5.1 | 1.6.0 | 1.6.1 | 1.7.0 | 1.7.1 | 1.7.2 | 1.7.3 | 1.8.0 | 1.8.1 | 1.8.2 | 1.9.0 | 1.9.1 | 1.9.2 | 1.10.0 | 1.10.1 | 1.10.2 | 1.10.3 | 1.10.4 | 1.11.0 | 1.11.1 | 1.11.2 | 1.11.3 | 1.12.0 | 1.12.1 | 1.12.2 | 1.12.3 | 1.12.4 | 1.13.0 | 1.13.1 | 1.13.2 | 1.13.3 | 1.13.4 | 1.14.0 | 1.14.1 | 1.14.2 | 1.14.3 | 1.14.4 | 1.15.0 | 1.15.1 | 1.15.2 | 1.15.3 | 1.16.0 | 1.16.1 | 1.16.2 | 1.17.0 | 1.17.1 | 1.17.2 | 1.17.3 | 1.17.4 | 1.18.0 | 1.18.1 | 1.18.2 | 1.18.3 | 1.18.4 | 1.18.5 | 1.19.0 | 1.19.2 | 1.19.3 | 1.19.4 | 1.20.0 | 1.20.1
Debian1 product
  • busybox< 1:1.20.0-8
Mageia1 product
  • busybox< 1.20.2-2.1.mga3
T-mobile1 product
Ubuntu1 product
  • busybox< 1:1.21.0-1ubuntu1

6 vendors · 8 products

References

24 links
Show all 24 references