Ubuntu.comUB:CVE-2013-6432CVE-2013-6432
4.6 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:L/Au:S/C:N/I:N/A:C
0.0004 Low
EPSS
Percentile
5.3%
The ping_recvmsg function in net/ipv4/ping.c in the Linux kernel before
3.12.4 does not properly interact with read system calls on ping sockets,
which allows local users to cause a denial of service (NULL pointer
dereference and system crash) by leveraging unspecified privileges to
execute a crafted application.
Bugs
References
www.openwall.com/lists/oss-security/2013/12/06/2
git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=cf970c002d270c36202bd5b9c2804d3097a52da0
launchpad.net/bugs/cve/CVE-2013-6432
nvd.nist.gov/vuln/detail/CVE-2013-6432
security-tracker.debian.org/tracker/CVE-2013-6432
ubuntu.com/security/notices/USN-2113-1
ubuntu.com/security/notices/USN-2117-1
www.cve.org/CVERecord?id=CVE-2013-6432
Related
4.6 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:L/Au:S/C:N/I:N/A:C
0.0004 Low
EPSS
Percentile
5.3%