2 matches found
CVE-2017-7487: Use After Free
The ipxitfioctl function in net/ipx/afipx.c in the Linux kernel through 4.11.1 mishandles reference counts, which allows local users to cause a denial of service use-after-free or possibly have unspecified other impact via a failed SIOCGIFADDR ioctl call for an IPX interface...
7.8CVSS6.3AI score0.0038EPSS
SaveExploits0References2
CVE-2013-7268: Improper Input Validation
The ipxrecvmsg function in net/ipx/afipx.c in the Linux kernel before 3.12.4 updates a certain length value without ensuring that an associated data structure has been initialized, which allows local users to obtain sensitive information from kernel memory via a 1 recvfrom, 2 recvmmsg, or 3 recvm...
4.9CVSS5.7AI score0.00434EPSS
SaveExploits0References2
20