CVE-2013-0310

Published Feb 22, 2013

Last updated 2 years ago

Overview

Description
The cipso_v4_validate function in net/ipv4/cipso_ipv4.c in the Linux kernel before 3.4.8 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via an IPOPT_CIPSO IP_OPTIONS setsockopt system call.
Source
secalert@redhat.com
NVD status
Modified

Social media

Hype score
Not currently trending

Risk scores

CVSS 2.0

Type
Primary
Base score
6.6
Impact score
10
Exploitability score
2.7
Vector string
AV:L/AC:M/Au:S/C:C/I:C/A:C

Weaknesses

nvd@nist.gov
CWE-119

Evaluator

Comment
Per https://access.redhat.com/security/cve/CVE-2013-0310 "This issue did affect the version of Linux kernel as shipped with Red Hat Enterprise Linux 6."
Impact
-
Solution
-

Configurations