CVE-2013-6431 in Kernel
요약 (영어)
The fib6_add function in net/ipv6/ip6_fib.c in the Linux kernel before 3.11.5 does not properly implement error-code encoding, which allows local users to cause a denial of service (NULL pointer dereference and system crash) by leveraging the CAP_NET_ADMIN capability for an IPv6 SIOCADDRT ioctl call.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
예약하다
2013. 11. 04.
공개
2013. 12. 09.
상태
확인됨
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 11472 | Linux Kernel IPv6 Socket IOCTL ip6_fib.c fib6_add 권한 상승 | 264 | 정의되지 않음 | 공식 수정 | CVE-2013-6431 |