NVD

Id
37971  
Name
CVE-2013-1828  
Description
The sctp_getsockopt_assoc_stats function in net/sctp/socket.c in the Linux kernel before 3.8.4 does not validate a size value before proceeding to a copy_from_user operation, which allows local users to gain privileges via a crafted application that contains an SCTP_GET_ASSOC_STATS getsockopt system call.  
Reject
 
CVSS Version
2  
CVSS Score
6.9  
Severity
Medium  
CVSS Base Score
6.9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2013-03-22  
Modified Date
2013-11-30  
Seq
2013-1828  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
193902 37971 CVE-2013-1828 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=726bc6b092da4c093eb74d13c07184b18c1af0f1  View
193903 37971 CVE-2013-1828 http://grsecurity.net/~spender/sctp.c  View
193904 37971 CVE-2013-1828 http://twitter.com/grsecurity/statuses/309805924749541376  View
193905 37971 CVE-2013-1828 24747  View
193906 37971 CVE-2013-1828 http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.8.4  View
193907 37971 CVE-2013-1828 [oss-security] 20130307 Re: CVE Request -- Linux kernel: sctp: SCTP_GET_ASSOC_STATS stack overflow  View
193908 37971 CVE-2013-1828 https://bugzilla.redhat.com/show_bug.cgi?id=919315  View
193909 37971 CVE-2013-1828 https://github.com/torvalds/linux/commit/726bc6b092da4c093eb74d13c07184b18c1af0f1  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
20427 JVNDB-2013-002002 Linux Kernel の net/sctp/socket.c における権限を取得される脆弱性 Linux Kernel の net/sctp/socket.c 内の sctp_getsockopt_assoc_stats 関数は、copy_from_user 操作を実行する前に、サイズ値を検証しないため、権限を取得される脆弱性が存在します。 CVE-2013-1828 61770 CVE-2013-1828 37971 6.9 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-002002.html 2013-03-20 2013-03-26 View