| Max CVSS | 6.9 | Min CVSS | 3.6 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2013-4343 | 6.9 |
Use-after-free vulnerability in drivers/net/tun.c in the Linux kernel through 3.11.1 allows local users to gain privileges by leveraging the CAP_NET_ADMIN capability and providing an invalid tuntap interface name in a TUNSETIFF ioctl call.
|
11-08-2023 - 18:13 | 25-09-2013 - 10:31 | |
| CVE-2013-4470 | 6.9 |
The Linux kernel before 3.12, when UDP Fragmentation Offload (UFO) is enabled, does not properly initialize certain data structures, which allows local users to cause a denial of service (memory corruption and system crash) or possibly gain privilege
|
13-02-2023 - 04:47 | 04-11-2013 - 15:55 | |
| CVE-2013-4387 | 6.1 |
net/ipv6/ip6_output.c in the Linux kernel through 3.11.4 does not properly determine the need for UDP Fragmentation Offload (UFO) processing of small packets after the UFO queueing of a large packet, which allows remote attackers to cause a denial of
|
13-02-2023 - 04:46 | 10-10-2013 - 10:55 | |
| CVE-2013-4350 | 5.0 |
The IPv6 SCTP implementation in net/sctp/ipv6.c in the Linux kernel through 3.11.1 uses data structures and function calls that do not trigger an intended configuration of IPsec encryption, which allows remote attackers to obtain sensitive informatio
|
13-02-2023 - 04:46 | 25-09-2013 - 10:31 | |
| CVE-2013-4270 | 3.6 |
The net_ctl_permissions function in net/sysctl_net.c in the Linux kernel before 3.11.5 does not properly determine uid and gid values, which allows local users to bypass intended /proc/sys/net restrictions via a crafted application.
|
13-02-2023 - 04:45 | 09-12-2013 - 18:55 | |
| CVE-2013-4299 | 6.0 |
Interpretation conflict in drivers/md/dm-snap-persistent.c in the Linux kernel through 3.11.6 allows remote authenticated users to obtain sensitive information or modify data via a crafted mapping to a snapshot block device.
|
22-04-2019 - 17:48 | 24-10-2013 - 10:53 |