CVE-2013-4362

Name	CVE-2013-4362
Description	WEB-DAV Linux File System (davfs2) 1.4.6 and 1.4.7 allow local users to gain privileges via unknown attack vectors in (1) kernel_interface.c and (2) mount_davfs.c, related to the "system" function.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
References	DSA-2765-1
Debian Bugs	723034

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
davfs2 (PTS)	buster	1.5.5-1	fixed
	bullseye	1.6.0-1	fixed
	bookworm	1.6.1-1	fixed
	sid	1.7.0-1	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Origin	Debian Bugs
davfs2	source	squeeze	1.4.6-1.1+squeeze1	DSA-2765-1
davfs2	source	wheezy	1.4.6-1.1+deb7u1	DSA-2765-1
davfs2	source	(unstable)	1.4.7-3		723034

http://savannah.nongnu.org/bugs/?40034