Published: 03/05/2013 Updated: 13/02/2023

CVSS v2 Base Score: 6.9 | Impact Score: 10 | Exploitability Score: 3.4

VMScore: 615

Vector: AV:L/AC:M/Au:N/C:C/I:C/A:C

The scm_set_cred function in include/net/scm.h in the Linux kernel prior to 3.8.11 uses incorrect uid and gid values during credentials passing, which allows local users to gain privileges via a crafted application.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel 3.8.2
linux linux kernel 3.8.7
linux linux kernel 3.8.0
linux linux kernel 3.8.6
linux linux kernel
linux linux kernel 3.8.5
linux linux kernel 3.8.8
linux linux kernel 3.8.9
linux linux kernel 3.8.1
linux linux kernel 3.8.3
linux linux kernel 3.8.4

Several vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service, information leak or privilege escalation The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2013-0160 vladz reported a timing leak with the /dev/ptmx character device A local user could use this to d ...

Several security issues were fixed in the kernel ...

The scm_set_cred function in include/net/scmh in the Linux kernel before 3811 uses incorrect uid and gid values during credentials passing, which allows local users to gain privileges via a crafted application ...

CWE-264 https://bugzilla.redhat.com/show_bug.cgi?id=955629 http://www.openwall.com/lists/oss-security/2013/04/29/1 https://github.com/torvalds/linux/commit/83f1b4ba917db5dc5a061a44b3403ddb6e783494 http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.8.11 http://www.mandriva.com/security/advisories?name=MDVSA-2013:176 http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00018.html http://lists.fedoraproject.org/pipermail/package-announce/2013-April/103750.html http://lists.fedoraproject.org/pipermail/package-announce/2013-May/104480.html http://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00006.html http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00007.html http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00016.html http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=83f1b4ba917db5dc5a061a44b3403ddb6e783494 https://nvd.nist.gov https://www.debian.org/security/./dsa-2669 https://usn.ubuntu.com/1882-1/https://access.redhat.com/security/cve/cve-2013-1979

CVE-2013-1979

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect