NVD

Id
39937  
Name
CVE-2013-4312  
Description
The Linux kernel before 4.4.1 allows local users to bypass file-descriptor limits and cause a denial of service (memory consumption) by sending each descriptor over a UNIX socket before closing it, related to net/unix/af_unix.c and net/unix/garbage.c.  
Reject
 
CVSS Version
2  
CVSS Score
4.9  
Severity
Medium  
CVSS Base Score
4.9  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-18  
Published
2016-02-07  
Modified Date
2016-12-05  
Seq
2013-4312  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
203168 39937 CVE-2013-4312 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=712f4aad406bb1ed67f3f98d04c044191f0ff593  View
203169 39937 CVE-2013-4312 FEDORA-2016-2f25d12c51  View
203170 39937 CVE-2013-4312 FEDORA-2016-5d43766e33  View
203171 39937 CVE-2013-4312 RHSA-2016:0855  View
203172 39937 CVE-2013-4312 DSA-3448  View
203173 39937 CVE-2013-4312 DSA-3503  View
203174 39937 CVE-2013-4312 http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.1  View
203175 39937 CVE-2013-4312 http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html  View
203176 39937 CVE-2013-4312 82986  View
203177 39937 CVE-2013-4312 USN-2929-1  View
203178 39937 CVE-2013-4312 USN-2929-2  View
203179 39937 CVE-2013-4312 USN-2931-1  View
203180 39937 CVE-2013-4312 USN-2932-1  View
203181 39937 CVE-2013-4312 USN-2967-1  View
203182 39937 CVE-2013-4312 USN-2967-2  View
203183 39937 CVE-2013-4312 https://bugzilla.redhat.com/show_bug.cgi?id=1297813  View
203184 39937 CVE-2013-4312 https://github.com/torvalds/linux/commit/712f4aad406bb1ed67f3f98d04c044191f0ff593  View
203185 39937 CVE-2013-4312 https://security-tracker.debian.org/tracker/CVE-2013-4312  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
25171 JVNDB-2013-006748 Linux Kernel におけるファイルディスクリプタの制限を回避される脆弱性 Linux Kernel には、net/unix/af_unix.c および net/unix/garbage.c に関する処理に不備があるため、ファイルディスクリプタの制限を回避され、サービス運用妨害 (メモリ消費) 状態にされる脆弱性が存在します。 CVE-2013-4312 64254 CVE-2013-4312 39937 4.9 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-006748.html 2013-06-12 2016-03-01 View