NVD

Id
37969  
Name
CVE-2013-1826  
Description
The xfrm_state_netlink function in net/xfrm/xfrm_user.c in the Linux kernel before 3.5.7 does not properly handle error conditions in dump_one_state function calls, which allows local users to gain privileges or cause a denial of service (NULL pointer dereference and system crash) by leveraging the CAP_NET_ADMIN capability.  
Reject
 
CVSS Version
2  
CVSS Score
6.2  
Severity
Medium  
CVSS Base Score
6.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
1.9  
CVSS Vector
(AV:L/AC:H/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2013-03-22  
Modified Date
2013-06-04  
Seq
2013-1826  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
193889 37969 CVE-2013-1826 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=864745d291b5ba80ea0bd0edcbe67273de368836  View
193890 37969 CVE-2013-1826 RHSA-2013:0744  View
193891 37969 CVE-2013-1826 http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.5.7  View
193892 37969 CVE-2013-1826 [oss-security] 20130307 Re: CVE Requests (maybe): Linux kernel: various info leaks, some NULL ptr derefs  View
193893 37969 CVE-2013-1826 USN-1829-1  View
193894 37969 CVE-2013-1826 https://bugzilla.redhat.com/show_bug.cgi?id=919384  View
193895 37969 CVE-2013-1826 https://github.com/torvalds/linux/commit/864745d291b5ba80ea0bd0edcbe67273de368836  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
30265 JVNDB-2012-005972 Linux Kernel の net/xfrm/xfrm_user.c における権限を取得される脆弱性 Linux Kernel の net/xfrm/xfrm_user.c 内の xfrm_state_netlink 関数は、dump_one_state 関数コールのエラーの状態を適切に処理しないため、権限を取得される、またはサービス運用妨害 (Null ポインタデリファレンスおよびシステムクラッシュ) 状態にされる脆弱性が存在します。 CVE-2013-1826 61768 CVE-2013-1826 37969 6.2 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005972.html 2012-10-13 2013-06-20 View