CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
AI Score
Confidence
High
EPSS
Percentile
90.9%
Miroslav Vadkerti discovered a flaw in how the permissions for network
sysctls are handled in the Linux kernel. An unprivileged local user could
exploit this flaw to have privileged access to files in /proc/sys/net/.
(CVE-2013-4270)
A flaw was discovered in the Linux kernel’s dm snapshot facility. A remote
authenticated user could exploit this flaw to obtain sensitive information
or modify/corrupt data. (CVE-2013-4299)
Wannes Rombouts reported a vulnerability in the networking tuntap interface
of the Linux kernel. A local user with the CAP_NET_ADMIN capability could
leverage this flaw to gain full admin privileges. (CVE-2013-4343)
Alan Chester reported a flaw in the IPv6 Stream Control Transmission
Protocol (SCTP) of the Linux kernel. A remote attacker could exploit this
flaw to obtain sensitive information by sniffing network traffic.
(CVE-2013-4350)
Dmitry Vyukov reported a flaw in the Linux kernel’s handling of IPv6 UDP
Fragmentation Offload (UFO) processing. A remote attacker could leverage
this flaw to cause a denial of service (system crash). (CVE-2013-4387)
Hannes Frederic Sowa discovered a flaw in the Linux kernel’s UDP
Fragmentation Offload (UFO). An unprivileged local user could exploit this
flaw to cause a denial of service (system crash) or possibly gain
administrative privileges. (CVE-2013-4470)
A flaw was discovered in the Linux kernel’s fib6 error-code encoding for
IPv6. A local user with the CAT_NET_ADMIN capability could exploit this
flaw to cause a denial of service (system crash). (CVE-2013-6431)
Evan Huus reported a buffer overflow in the Linux kernel’s radiotap header
parsing. A remote attacker could cause a denial of service (buffer over-
read) via a specially crafted header. (CVE-2013-7027)
An information leak was discovered in the Linux kernel’s SIOCWANDEV ioctl
call. A local user with the CAP_NET_ADMIN capability could exploit this
flaw to obtain potentially sensitive information from kernel memory.
(CVE-2014-1444)
An information leak was discovered in the wanxl ioctl function the Linux
kernel. A local user could exploit this flaw to obtain potentially
sensitive information from kernel memory. (CVE-2014-1445)
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Ubuntu | 13.10 | noarch | linux-image-3.11.0-14-generic | < 3.11.0-14.21 | UNKNOWN |
Ubuntu | 13.10 | noarch | block-modules-3.11.0-14-generic-di | < 3.11.0-14.21 | UNKNOWN |
Ubuntu | 13.10 | noarch | crypto-modules-3.11.0-14-generic-di | < 3.11.0-14.21 | UNKNOWN |
Ubuntu | 13.10 | noarch | fat-modules-3.11.0-14-generic-di | < 3.11.0-14.21 | UNKNOWN |
Ubuntu | 13.10 | noarch | fb-modules-3.11.0-14-generic-di | < 3.11.0-14.21 | UNKNOWN |
Ubuntu | 13.10 | noarch | firewire-core-modules-3.11.0-14-generic-di | < 3.11.0-14.21 | UNKNOWN |
Ubuntu | 13.10 | noarch | floppy-modules-3.11.0-14-generic-di | < 3.11.0-14.21 | UNKNOWN |
Ubuntu | 13.10 | noarch | fs-core-modules-3.11.0-14-generic-di | < 3.11.0-14.21 | UNKNOWN |
Ubuntu | 13.10 | noarch | fs-secondary-modules-3.11.0-14-generic-di | < 3.11.0-14.21 | UNKNOWN |
Ubuntu | 13.10 | noarch | input-modules-3.11.0-14-generic-di | < 3.11.0-14.21 | UNKNOWN |
ubuntu.com/security/CVE-2013-4270
ubuntu.com/security/CVE-2013-4299
ubuntu.com/security/CVE-2013-4343
ubuntu.com/security/CVE-2013-4350
ubuntu.com/security/CVE-2013-4387
ubuntu.com/security/CVE-2013-4470
ubuntu.com/security/CVE-2013-6431
ubuntu.com/security/CVE-2013-7027
ubuntu.com/security/CVE-2014-1444
ubuntu.com/security/CVE-2014-1445