NVD

Id
36657  
Name
CVE-2013-0310  
Description
The cipso_v4_validate function in net/ipv4/cipso_ipv4.c in the Linux kernel before 3.4.8 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via an IPOPT_CIPSO IP_OPTIONS setsockopt system call.  
Reject
 
CVSS Version
2  
CVSS Score
6.6  
Severity
Medium  
CVSS Base Score
6.6  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
2.7  
CVSS Vector
(AV:L/AC:M/Au:S/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2013-02-21  
Modified Date
2013-03-07  
Seq
2013-0310  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
187338 36657 CVE-2013-0310 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=89d7ae34cdda4195809a5a987f697a517a2a3177  View
187339 36657 CVE-2013-0310 RHSA-2013:0496  View
187340 36657 CVE-2013-0310 http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.4.8  View
187341 36657 CVE-2013-0310 [oss-security] 20130219 Re: CVE request -- Linux kernel: net: CIPSO_V4_TAG_LOCAL tag NULL pointer dereference  View
187342 36657 CVE-2013-0310 https://bugzilla.redhat.com/show_bug.cgi?id=912900  View
187343 36657 CVE-2013-0310 https://github.com/torvalds/linux/commit/89d7ae34cdda4195809a5a987f697a517a2a3177  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
30241 JVNDB-2012-005948 Linux Kernel の net/ipv4/cipso_ipv4.c におけるサービス運用妨害 (DoS) の脆弱性 Linux Kernel の net/ipv4/cipso_ipv4.c の cipso_v4_validate 関数には、サービス運用妨害 (NULL ポインタデリファレンスおよびシステムクラッシュ) 状態となるなど、不特定の影響を受ける脆弱性が脆弱性が存在します。 CVE-2013-0310 60252 CVE-2013-0310 36657 6.6 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005948.html 2012-08-09 2013-03-28 View