Vulnerability Details CVE-2013-4343
Use-after-free vulnerability in drivers/net/tun.c in the Linux kernel through 3.11.1 allows local users to gain privileges by leveraging the CAP_NET_ADMIN capability and providing an invalid tuntap interface name in a TUNSETIFF ioctl call.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 27.1%
CVSS Severity
CVSS v2 Score 6.9
References
- http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00071.html
- http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00039.html
- http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00048.html
- http://marc.info/?l=linux-kernel&m=137889490510745&w=2
- http://rhn.redhat.com/errata/RHSA-2013-1490.html
- http://www.openwall.com/lists/oss-security/2013/09/12/3
- http://www.spinics.net/lists/netdev/msg250066.html
- http://www.ubuntu.com/usn/USN-2020-1
- http://www.ubuntu.com/usn/USN-2023-1
- http://www.ubuntu.com/usn/USN-2049-1
- https://bugzilla.redhat.com/show_bug.cgi?id=1007733
- http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00071.html
- http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00039.html
- http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00048.html
- http://marc.info/?l=linux-kernel&m=137889490510745&w=2
- http://rhn.redhat.com/errata/RHSA-2013-1490.html
- http://www.openwall.com/lists/oss-security/2013/09/12/3
- http://www.spinics.net/lists/netdev/msg250066.html
- http://www.ubuntu.com/usn/USN-2020-1
- http://www.ubuntu.com/usn/USN-2023-1
- http://www.ubuntu.com/usn/USN-2049-1
- https://bugzilla.redhat.com/show_bug.cgi?id=1007733
Products affected by CVE-2013-4343
-
cpe:2.3:o:canonical:ubuntu_linux:13.04
-
cpe:2.3:o:canonical:ubuntu_linux:13.10
-
cpe:2.3:o:linux:linux_kernel:3.10
-
cpe:2.3:o:linux:linux_kernel:3.10.1
-
cpe:2.3:o:linux:linux_kernel:3.10.10
-
cpe:2.3:o:linux:linux_kernel:3.10.11
-
cpe:2.3:o:linux:linux_kernel:3.10.12
-
cpe:2.3:o:linux:linux_kernel:3.10.13
-
cpe:2.3:o:linux:linux_kernel:3.10.14
-
cpe:2.3:o:linux:linux_kernel:3.10.15
-
cpe:2.3:o:linux:linux_kernel:3.10.2
-
cpe:2.3:o:linux:linux_kernel:3.10.3
-
cpe:2.3:o:linux:linux_kernel:3.10.4
-
cpe:2.3:o:linux:linux_kernel:3.10.5
-
cpe:2.3:o:linux:linux_kernel:3.10.6
-
cpe:2.3:o:linux:linux_kernel:3.10.7
-
cpe:2.3:o:linux:linux_kernel:3.10.8
-
cpe:2.3:o:linux:linux_kernel:3.10.9
-
cpe:2.3:o:linux:linux_kernel:3.11
-
cpe:2.3:o:linux:linux_kernel:3.11.1
-
cpe:2.3:o:linux:linux_kernel:3.11.2
-
cpe:2.3:o:linux:linux_kernel:3.11.3
-
cpe:2.3:o:linux:linux_kernel:3.11.4
-
cpe:2.3:o:linux:linux_kernel:3.8
-
cpe:2.3:o:linux:linux_kernel:3.8.0
-
cpe:2.3:o:linux:linux_kernel:3.8.1
-
cpe:2.3:o:linux:linux_kernel:3.8.10
-
cpe:2.3:o:linux:linux_kernel:3.8.11
-
cpe:2.3:o:linux:linux_kernel:3.8.12
-
cpe:2.3:o:linux:linux_kernel:3.8.13
-
cpe:2.3:o:linux:linux_kernel:3.8.2
-
cpe:2.3:o:linux:linux_kernel:3.8.3
-
cpe:2.3:o:linux:linux_kernel:3.8.4
-
cpe:2.3:o:linux:linux_kernel:3.8.5
-
cpe:2.3:o:linux:linux_kernel:3.8.6
-
cpe:2.3:o:linux:linux_kernel:3.8.7
-
cpe:2.3:o:linux:linux_kernel:3.8.8
-
cpe:2.3:o:linux:linux_kernel:3.8.9
-
cpe:2.3:o:linux:linux_kernel:3.9
-
cpe:2.3:o:linux:linux_kernel:3.9.0
-
cpe:2.3:o:linux:linux_kernel:3.9.1
-
cpe:2.3:o:linux:linux_kernel:3.9.10
-
cpe:2.3:o:linux:linux_kernel:3.9.11
-
cpe:2.3:o:linux:linux_kernel:3.9.2
-
cpe:2.3:o:linux:linux_kernel:3.9.3
-
cpe:2.3:o:linux:linux_kernel:3.9.4
-
cpe:2.3:o:linux:linux_kernel:3.9.5
-
cpe:2.3:o:linux:linux_kernel:3.9.6
-
cpe:2.3:o:linux:linux_kernel:3.9.7
-
cpe:2.3:o:linux:linux_kernel:3.9.8
-
cpe:2.3:o:linux:linux_kernel:3.9.9