Lucene search

K
ubuntuUbuntuUSN-2096-1
HistoryJan 31, 2014 - 12:00 a.m.

Linux kernel vulnerability

2014-01-3100:00:00
ubuntu.com
54

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

AI Score

6.3

Confidence

High

EPSS

0.001

Percentile

27.3%

Releases

  • Ubuntu 13.10

Packages

  • linux - Linux kernel

Details

Pageexec reported a bug in the Linux kernel’s recvmmsg syscall when called
from code using the x32 ABI. An unprivileged local user could exploit this
flaw to cause a denial of service (system crash) or gain administrator
privileges.

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

AI Score

6.3

Confidence

High

EPSS

0.001

Percentile

27.3%