CVE-2013-1763

EPSS 4.2%

Array index error in the __sock_diag_rcv_msg function in net/core/sock_diag.c in the Linux kernel before 3.7.10 allows local users to gain privileges via a large family value in a Netlink message.

Affected products

n/a · n/a

public PoCs found — 8

githubgithub.com/qkrtjsrbs315/CVE-2013-1763★ 0 cve_referencewww.exploit-db.com/exploits/24746unverified cve_referencewww.exploit-db.com/exploits/33336unverified exploitdbwww.exploit-db.com/exploits/33336unverified exploitdbwww.exploit-db.com/exploits/24555unverified exploitdbwww.exploit-db.com/exploits/24746unverified cve_referencewww.exploit-db.com/exploits/24555unverified exploitdbwww.exploit-db.com/exploits/44299unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6e601a53566d84e1ffd25e7b6fe0b6894ffd79c0 http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00004.html http://openwall.com/lists/oss-security/2013/02/25/12 https://bugzilla.redhat.com/show_bug.cgi?id=915052 https://github.com/torvalds/linux/commit/6e601a53566d84e1ffd25e7b6fe0b6894ffd79c0 http://www.exploit-db.com/exploits/24555 http://www.exploit-db.com/exploits/24746 http://www.exploit-db.com/exploits/33336 http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.7.10 http://www.mandriva.com/security/advisories?name=MDVSA-2013:176 http://www.openwall.com/lists/oss-security/2013/02/24/3 http://www.ubuntu.com/usn/USN-1749-1