Lucene search

K
cvelistRedhatCVELIST:CVE-2013-1826
HistoryMar 22, 2013 - 10:00 a.m.

CVE-2013-1826

2013-03-2210:00:00
redhat
www.cve.org
7

AI Score

5.6

Confidence

High

EPSS

0

Percentile

5.1%

The xfrm_state_netlink function in net/xfrm/xfrm_user.c in the Linux kernel before 3.5.7 does not properly handle error conditions in dump_one_state function calls, which allows local users to gain privileges or cause a denial of service (NULL pointer dereference and system crash) by leveraging the CAP_NET_ADMIN capability.

AI Score

5.6

Confidence

High

EPSS

0

Percentile

5.1%