Lucene search

K
nvd[email protected]NVD:CVE-2013-4343
HistorySep 25, 2013 - 10:31 a.m.

CVE-2013-4343

2013-09-2510:31:29
CWE-399
web.nvd.nist.gov
2

6.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

Use-after-free vulnerability in drivers/net/tun.c in the Linux kernel through 3.11.1 allows local users to gain privileges by leveraging the CAP_NET_ADMIN capability and providing an invalid tuntap interface name in a TUNSETIFF ioctl call.

Affected configurations

NVD
Node
linuxlinux_kernelRange3.8–3.10.16
OR
linuxlinux_kernelRange3.11–3.11.5
Node
canonicalubuntu_linuxMatch13.04
OR
canonicalubuntu_linuxMatch13.10

6.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%