CVE-2013-1958

2013-04-2400:00:00

ubuntu.com

1.9 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:M/Au:N/C:N/I:P/A:N

0.0004 Low

EPSS

Percentile

5.1%

JSON

The scm_check_creds function in net/core/scm.c in the Linux kernel before
3.8.6 does not properly enforce capability requirements for controlling the
PID value associated with a UNIX domain socket, which allows local users to
bypass intended access restrictions by leveraging the time interval during
which a user namespace has been created but a PID namespace has not been
created.