Lucene search

K
ubuntucveUbuntu.comUB:CVE-2013-4343
HistorySep 25, 2013 - 12:00 a.m.

CVE-2013-4343

2013-09-2500:00:00
ubuntu.com
ubuntu.com
22

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.3%

Use-after-free vulnerability in drivers/net/tun.c in the Linux kernel
through 3.11.1 allows local users to gain privileges by leveraging the
CAP_NET_ADMIN capability and providing an invalid tuntap interface name in
a TUNSETIFF ioctl call.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu13.04noarchlinux<Β 3.8.0-33.48UNKNOWN
ubuntu13.10noarchlinux<Β 3.11.0-13.20UNKNOWN
ubuntu12.04noarchlinux-lts-raring<Β 3.8.0-33.48~precise1UNKNOWN

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.3%