CVEvulnerability
CVE-2013-4343
6.9 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-09-25
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.9 MEDIUM — AV:L/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-399
Description
Use-after-free vulnerability in drivers/net/tun.c in the Linux kernel through 3.11.1 allows local users to gain privileges by leveraging the CAP_NET_ADMIN capability and providing an invalid tuntap interface name in a TUNSETIFF ioctl call.
Affected configurations
• linux linux kernel (>= 3.8 < 3.10.16)
• linux linux kernel (>= 3.11 < 3.11.5)
• canonical ubuntu linux 13.04
• canonical ubuntu linux 13.10
Related
Weakness · not in database (1)
References
- http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00071.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00039.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00048.html Mailing List, Third Party Advisory
- http://marc.info/?l=linux-kernel&m=137889490510745&w=2 Mailing List, Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2013-1490.html Third Party Advisory
- http://www.openwall.com/lists/oss-security/2013/09/12/3 Mailing List, Third Party Advisory
- http://www.spinics.net/lists/netdev/msg250066.html Third Party Advisory
- http://www.ubuntu.com/usn/USN-2020-1 Third Party Advisory
- http://www.ubuntu.com/usn/USN-2023-1 Third Party Advisory
- http://www.ubuntu.com/usn/USN-2049-1 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1007733 Issue Tracking, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00071.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00039.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00048.html Mailing List, Third Party Advisory
- http://marc.info/?l=linux-kernel&m=137889490510745&w=2 Mailing List, Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2013-1490.html Third Party Advisory
- http://www.openwall.com/lists/oss-security/2013/09/12/3 Mailing List, Third Party Advisory
- http://www.spinics.net/lists/netdev/msg250066.html Third Party Advisory
- http://www.ubuntu.com/usn/USN-2020-1 Third Party Advisory
- http://www.ubuntu.com/usn/USN-2023-1 Third Party Advisory
- http://www.ubuntu.com/usn/USN-2049-1 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1007733 Issue Tracking, Third Party Advisory