NVD

Id
37914  
Name
CVE-2013-1763  
Description
Array index error in the __sock_diag_rcv_msg function in net/core/sock_diag.c in the Linux kernel before 3.7.10 allows local users to gain privileges via a large family value in a Netlink message.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2013-02-28  
Modified Date
2014-05-16  
Seq
2013-1763  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
193466 37914 CVE-2013-1763 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=6e601a53566d84e1ffd25e7b6fe0b6894ffd79c0  View
193467 37914 CVE-2013-1763 openSUSE-SU-2013:0395  View
193468 37914 CVE-2013-1763 [oss-security] 20130225 Re: CVE Request: kernel - sock_diag: Fix out-of-bounds access to sock_diag_handlers[]  View
193469 37914 CVE-2013-1763 24555  View
193470 37914 CVE-2013-1763 24746  View
193471 37914 CVE-2013-1763 33336  View
193472 37914 CVE-2013-1763 http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.7.10  View
193473 37914 CVE-2013-1763 MDVSA-2013:176  View
193474 37914 CVE-2013-1763 [oss-security] 20130224 Re: CVE Request: kernel - sock_diag: Fix out-of-bounds access to sock_diag_handlers[]  View
193475 37914 CVE-2013-1763 USN-1749-1  View
193476 37914 CVE-2013-1763 USN-1750-1  View
193477 37914 CVE-2013-1763 USN-1751-1  View
193478 37914 CVE-2013-1763 https://bugzilla.redhat.com/show_bug.cgi?id=915052  View
193479 37914 CVE-2013-1763 https://github.com/torvalds/linux/commit/6e601a53566d84e1ffd25e7b6fe0b6894ffd79c0  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
20139 JVNDB-2013-001714 Linux Kernel の net/core/sock_diag.c における権限を取得される脆弱性 Linux Kernel の net/core/sock_diag.c 内の __sock_diag_rcv_msg 関数には、配列のインデックスエラーにより、権限を取得される脆弱性が存在します。 CVE-2013-1763 61705 CVE-2013-1763 37914 7.2 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001714.html 2013-02-27 2013-12-05 View