Published: 04/07/2013 Updated: 07/11/2023

CVSS v2 Base Score: 6.9 | Impact Score: 10 | Exploitability Score: 3.4

VMScore: 614

Vector: AV:L/AC:M/Au:N/C:C/I:C/A:C

A certain Red Hat patch for the Linux kernel 2.6.32 on Red Hat Enterprise Linux (RHEL) 6 allows local users to cause a denial of service (invalid free operation and system crash) or possibly gain privileges via a sendmsg system call with the IP_RETOPTS option, as demonstrated by hemlock.c. NOTE: this vulnerability exists because of an incorrect fix for CVE-2012-3552.

Vulnerable Product	Search on Vulmon	Subscribe to Product
redhat enterprise linux 6.0

Synopsis Important: kernel security and bug fix update Type/Severity Security Advisory: Important Topic Updated kernel packages that fix multiple security issues and several bugsare now available for Red Hat Enterprise Linux 6The Red Hat Security Response Team has rated this update as havingimportant secur ...

Synopsis Important: kernel security and bug fix update Type/Severity Security Advisory: Important Topic Updated kernel packages that fix multiple security issues and several bugsare now available for Red Hat OpenStack 30The Red Hat Security Response Team has rated this update as havingimportant security i ...

Synopsis Important: kernel security and bug fix update Type/Severity Security Advisory: Important Topic Updated kernel packages that fix three security issues and several bugs arenow available for Red Hat Enterprise Linux 63 Extended Update SupportThe Red Hat Security Response Team has rated this update a ...

Synopsis Important: kernel security and bug fix update Type/Severity Security Advisory: Important Topic Updated kernel packages that fix multiple security issues and several bugsare now available for Red Hat Enterprise Linux 5The Red Hat Security Response Team has rated this update as havingimportant secur ...

A certain Red Hat patch for the Linux kernel 2632 on Red Hat Enterprise Linux (RHEL) 6 allows local users to cause a denial of service (invalid free operation and system crash) or possibly gain privileges via a sendmsg system call with the IP_RETOPTS option, as demonstrated by hemlockc NOTE: this vulnerability exists because of an incorrect fi ...

NVD-CWE-Other http://www.openwall.com/lists/oss-security/2013/06/30/7 https://bugzilla.redhat.com/show_bug.cgi?id=979936 http://rhn.redhat.com/errata/RHSA-2013-1450.html http://rhn.redhat.com/errata/RHSA-2013-1166.html http://rhn.redhat.com/errata/RHSA-2013-1173.html https://nvd.nist.gov https://access.redhat.com/errata/RHSA-2013:1173 https://access.redhat.com/security/cve/cve-2013-2224

CVE-2013-2224

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect