CVE-2013-6432 in Linux Kernel
Summary
The ping_recvmsg function in net/ipv4/ping.c in the Linux kernel before 3.12.4 does not properly interact with read system calls on ping sockets, which allows local users to cause a denial of service (NULL pointer dereference and system crash) by leveraging unspecified privileges to execute a crafted application.
Reservation
11/04/2013
Disclosure
12/09/2013
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 11441 | Linux Kernel Ping Socket Read Call ping.c ping_recvmsg null pointer dereference | 476 | Not defined | Official fix | CVE-2013-6432 |