CVE

Id
64290  
CVE No.
CVE-2013-4343  
Status
Candidate  
Description
Use-after-free vulnerability in drivers/net/tun.c in the Linux kernel through 3.11.1 allows local users to gain privileges by leveraging the CAP_NET_ADMIN capability and providing an invalid tuntap interface name in a TUNSETIFF ioctl call.  
Phase
Assigned (20130612)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
634124 64290 CVE-2013-4343 MLIST:[linux-kernel] 20130911 [PATCH net V2] tuntap: correctly handle error in tun_set_iff()  View
634125 64290 CVE-2013-4343 URL:http://marc.info/?l=linux-kernel&m=137889490510745&w=2  View
634126 64290 CVE-2013-4343 MLIST:[netdev] 20130911 Use-after-free in TUNSETIFF  View
634127 64290 CVE-2013-4343 URL:http://www.spinics.net/lists/netdev/msg250066.html  View
634128 64290 CVE-2013-4343 MLIST:[oss-security] 20130912 Fwd: Use-after-free in TUNSETIFF  View
634129 64290 CVE-2013-4343 URL:http://www.openwall.com/lists/oss-security/2013/09/12/3  View
634130 64290 CVE-2013-4343 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=1007733  View
634131 64290 CVE-2013-4343 REDHAT:RHSA-2013:1490  View
634132 64290 CVE-2013-4343 URL:http://rhn.redhat.com/errata/RHSA-2013-1490.html  View
634133 64290 CVE-2013-4343 UBUNTU:USN-2049-1  View
634134 64290 CVE-2013-4343 URL:http://www.ubuntu.com/usn/USN-2049-1  View
634135 64290 CVE-2013-4343 UBUNTU:USN-2020-1  View
634136 64290 CVE-2013-4343 URL:http://www.ubuntu.com/usn/USN-2020-1  View
634137 64290 CVE-2013-4343 UBUNTU:USN-2023-1  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
23425 JVNDB-2013-005000 Linux Kernel の net/core/flow_dissector.c の skb_flow_dissect 関数におけるサービス運用妨害 (DoS) の脆弱性 Linux Kernel の net/core/flow_dissector.c の skb_flow_dissect 関数には、サービス運用妨害 (無限ループ) 状態にされる脆弱性が存在します。 CVE-2013-4348 64290 7.1 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005000.html  View