CVE-2013-4270

kernel: net: permissions flaw in /proc/sys/net

Published Dec 9, 2013 CVSS 2.0 · 3.6 Low EPSS < 1% KEV · Not listed
Description
The net_ctl_permissions function in net/sysctl_net.c in the Linux kernel before 3.11.5 does not properly determine uid and gid values, which allows local users to bypass intended /proc/sys/net restrictions via a crafted application.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2013-4170 The net_ctl_permissions function in net/sysctl_net.c in the Linux kernel before 3.11.5 does not properly determine uid and gid values, which allows local users to bypass intended /proc/sys/net restrictions via a crafted application.
Ubuntu USN Ubuntu USN USN-2020-1 Linux kernel (Raring HWE) vulnerabilities
Ubuntu USN Ubuntu USN USN-2023-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-2049-1 Linux kernel vulnerabilities
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 6, 2024, 4:38 PM
Reserved
Jun 12, 2013, 12:00 AM
Status
Modified
Published
Dec 9, 2013, 6:55 PM
Modified
Jun 16, 2026, 11:56 PM
Severity
Moderate
Public date
Oct 6, 2013, 12:00 AM