CVE-2013-6432 in Kernel
Zusammenfassung (Englisch)
The ping_recvmsg function in net/ipv4/ping.c in the Linux kernel before 3.12.4 does not properly interact with read system calls on ping sockets, which allows local users to cause a denial of service (NULL pointer dereference and system crash) by leveraging unspecified privileges to execute a crafted application.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Reservieren
04.11.2013
Veröffentlichung
09.12.2013
Status
Bestätigt
Einträge
VulDB provides additional information and datapoints for this CVE:
| ID | Schwachstelle | CWE | Aus | Mas | CVE |
|---|---|---|---|---|---|
| 11441 | Linux Kernel Ping Socket Read Call ping.c ping_recvmsg Denial of Service | 476 | Nicht definiert | Offizieller Fix | CVE-2013-6432 |