PT-2013-4945 · Linux · Linux Kernel

Published 2013-09-25 · Updated 2023-11-15 · CVE-2013-4300

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.11

Description The issue allows local users to gain privileges via PID spoofing due to an incorrect namespace capability check in the scm check creds function.

Recommendations For versions prior to 3.11, update to version 3.11 or later to resolve the issue.

Exploit

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2013-4300

USN-1995-1

USN-1998-1

Affected Products

Linux Kernel

References · 19

• 🔥 https://github.com/torvalds/linux/commit/d661684cf6820331feae71146c35da83d794467e · Exploit
• 🔥 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=d661684cf6820331feae71146c35da83d794467e · Exploit
• 🔥 https://bugzilla.redhat.com/show_bug.cgi?id=1004736 · Exploit
• 🔥 http://openwall.com/lists/oss-security/2013/09/05/3 · Exploit
• https://security-tracker.debian.org/tracker/CVE-2013-4300 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2013-4300 · Vendor Advisory
• https://ubuntu.com/security/CVE-2013-4300 · Vendor Advisory
• http://ubuntu.com/usn/USN-1995-1 · Vendor Advisory
• https://kernel.org/pub/linux/kernel/v3.x/patch-3.11.bz2 · Patch
• https://ubuntu.com/security/notices/USN-1998-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2013-4300 · Security Note
• http://ubuntu.com/usn/USN-1998-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2013-4300 · Security Note
• https://ubuntu.com/security/notices/USN-1995-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2013-4300 · Vendor Advisory