PT-2013-4964 · Linux+2 · Linux Kernel+2

Prasad Pandit · Publicado 2013-09-25 · Atualizado 2023-08-11 · CVE-2013-4343

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Média

Vetor base

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions through 3.11.1

Description The issue is related to a use-after-free vulnerability in the Linux kernel, specifically in the drivers/net/tun.c file. This vulnerability can be exploited by local users to gain privileges, provided they have the CAP NET ADMIN capability. The exploitation involves providing an invalid tuntap interface name in a TUNSETIFF ioctl call.

Recommendations For Linux kernel versions through 3.11.1, update to a version later than 3.11.1 to resolve the issue. At the moment, there is no information about additional mitigation measures for this specific vulnerability.

Exploit

Correção

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

ALT-PU-2014-1422

CVE-2013-4343

RHSA-2013:1490

SUSE-SU-2019:1527-1

USN-2020-1

USN-2023-1

USN-2049-1

Produtos afetados

Alt Linux

Linux Kernel

Suse

Referências · 281

• 🔥 https://github.com/luan0ap/cve-2018-14634 · Exploit
• https://github.com/torvalds/linux/commit/12ae030d54ef250706da5642fc7697cc60ad0df7 · Nota
• https://github.com/torvalds/linux/commit/d049f74f2dbe71354d43d393ac3a188947811348 · Nota
• https://github.com/torvalds/linux/commit/c547dbf55d5f8cf615ccc0e7265e98db27d3fb8b · Nota
• https://github.com/torvalds/linux/commit/2811ebac2521ceac84f2bdae402455baa6a7fb47 · Nota
• https://github.com/torvalds/linux/commit/95ee62083cb6453e056562d91f597552021e6ae7 · Nota
• https://github.com/torvalds/linux/commit/2690d97ade05c5325cbf7c72b94b90d265659886 · Nota
• https://github.com/torvalds/linux/commit/201f99f170df14ba52ea4c52847779042b7a623b · Nota
• https://github.com/torvalds/linux/commit/6fb392b1a63ae36c31f62bc3fc8630b49d602b62 · Nota
• https://github.com/torvalds/linux/commit/a8b33654b1e3b0c74d4a1fed041c9aae50b3c427 · Nota
• https://github.com/torvalds/linux/commit/e93b7d748be887cd7639b113ba7d7ef792a7efb9 · Nota
• https://github.com/torvalds/linux/commit/2433c8f094a008895e66f25bd1773cdb01c91d01 · Nota
• https://github.com/torvalds/linux/commit/a399b29dfbaaaf91162b2dc5a5875dd51bbfa2a1 · Nota
• https://github.com/torvalds/linux/commit/e9c6a182649f4259db704ae15a91ac820e63b0ca · Nota
• https://github.com/torvalds/linux/commit/7314e613d5ff9f0934f7a0f74ed7973b903315d1 · Nota