CVE-2013-6432

Kernel: ping: NULL pointer dereference on write to msg_name

Published Dec 9, 2013 CVSS 2.0 · 4.6 Medium EPSS < 1% KEV · Not listed
Description
The ping_recvmsg function in net/ipv4/ping.c in the Linux kernel before 3.12.4 does not properly interact with read system calls on ping sockets, which allows local users to cause a denial of service (NULL pointer dereference and system crash) by leveraging unspecified privileges to execute a crafted application.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2013-6242 The ping_recvmsg function in net/ipv4/ping.c in the Linux kernel before 3.12.4 does not properly interact with read system calls on ping sockets, which allows local users to cause a denial of service (NULL pointer dereference and system crash) by leveraging unspecified privileges to execute a crafted application.
Ubuntu USN Ubuntu USN USN-2113-1 Linux kernel (Saucy HWE) vulnerabilities
Ubuntu USN Ubuntu USN USN-2117-1 Linux kernel vulnerabilities
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 6, 2024, 5:39 PM
Reserved
Nov 4, 2013, 12:00 AM
Status
Modified
Published
Dec 9, 2013, 6:55 PM
Modified
Jun 17, 2026, 12:00 AM
Severity
Moderate
Public date
Nov 18, 2013, 12:00 AM