PT-2013-2000

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.6 Description The issue allows local users to obtain sensitive information from kernel heap memory. This can be achieved by leveraging the CAP NET ADMIN capability and providing a new or updated state, due to t...

UBUNTU-CVE-2013-1826

The xfrmstatenetlink function in net/xfrm/xfrmuser.c in the Linux kernel before 3.5.7 does not properly handle error conditions in dumponestate function calls, which allows local users to gain privileges or cause a denial of service NULL pointer dereference and system crash by leveraging the...

PT-2013-2001

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.6 Description The issue is related to the copy to user auth function in net/xfrm/xfrm user.c, which incorrectly uses a C library function for copying a string. This allows local users with the CAP NET ADMIN...

PT-2013-1011

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.6 Description The issue exists due to the lack of initialization of certain structures in the net/xfrm/xfrm user.c file of the Linux kernel. This allows local users with the CAP NET ADMIN capability to obtain...

kernel: ipv6: netfilter: ip6_tables: fix infoleak to userspace

net/ipv6/netfilter/ip6tables.c in the IPv6 implementation in the Linux kernel before 2.6.39 does not place the expected '\0' character at the end of string data in the values of certain structure members, which allows local users to obtain potentially sensitive information from kernel memory by...

PT-2006-1130 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel version 2.6.16 Description: A race condition exists in the do add counters function in netfilter for the Linux kernel, allowing local users with CAP NET ADMIN capabilities to read kernel memory. This is achieved by triggering the...

security flaw

Linux kernel 2.6.x does not properly restrict socket policy access to users with the CAPNETADMIN capability, which could allow local users to conduct unauthorized activities via 1 ipv4/ipsockglue.c and 2 ipv6/ipv6sockglue.c...