CVE-2013-1826 in Linux Kernel
摘要 (英语)
The xfrm_state_netlink function in net/xfrm/xfrm_user.c in the Linux kernel before 3.5.7 does not properly handle error conditions in dump_one_state function calls, which allows local users to gain privileges or cause a denial of service (NULL pointer dereference and system crash) by leveraging the CAP_NET_ADMIN capability.
预定
2013-02-19
披露
2013-03-22
条目
VulDB provides additional information and datapoints for this CVE:
| 标识符 | 漏洞 | CWE | 可利用 | 对策 | CVE |
|---|---|---|---|---|---|
| 7907 | Linux Kernel xfrm_user xfrm_user.c dump_one_state 拒绝服务 | 476 | 未定义 | 官方修复 | CVE-2013-1826 |