CVE-2013-7446

MEDIUM

Description

Use-after-free vulnerability in net/unix/af_unix.c in the Linux kernel before 4.3.3 allows local users to bypass intended AF_UNIX socket permissions or cause a denial of service (panic) via crafted epoll_ctl calls.

References

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=7d267278a9ece963d77eefec61630223fce08c6c

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00033.html

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00034.html

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00035.html

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00037.html

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00038.html

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00039.html

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00040.html

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00041.html

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00042.html

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00043.html

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00044.html

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00045.html

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00044.html

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00003.html

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00008.html

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00009.html

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00014.html

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00015.html

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00016.html

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00017.html

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00018.html

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00019.html

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00020.html

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00021.html

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00022.html

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00023.html

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00026.html

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html

http://www.debian.org/security/2015/dsa-3426

http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.3.3

http://www.openwall.com/lists/oss-security/2015/11/18/16

http://www.securityfocus.com/bid/77638

http://www.securitytracker.com/id/1034557

http://www.spinics.net/lists/netdev/msg318826.html

http://www.ubuntu.com/usn/USN-2886-1

http://www.ubuntu.com/usn/USN-2887-1

http://www.ubuntu.com/usn/USN-2887-2

http://www.ubuntu.com/usn/USN-2888-1

http://www.ubuntu.com/usn/USN-2889-1

http://www.ubuntu.com/usn/USN-2889-2

http://www.ubuntu.com/usn/USN-2890-1

http://www.ubuntu.com/usn/USN-2890-2

http://www.ubuntu.com/usn/USN-2890-3

https://bugzilla.redhat.com/show_bug.cgi?id=1282688

https://forums.grsecurity.net/viewtopic.php?f=3&t=4150

https://github.com/torvalds/linux/commit/7d267278a9ece963d77eefec61630223fce08c6c

https://groups.google.com/forum/#!topic/syzkaller/3twDUI4Cpm8

https://lkml.org/lkml/2013/10/14/424

https://lkml.org/lkml/2014/5/15/532

https://lkml.org/lkml/2015/9/13/195

Details

Source: MITRE

Published: 2015-12-28

Updated: 2018-08-13

Risk Information

CVSS v2.0

Base Score: 5.4

Vector: AV:L/AC:M/Au:N/C:N/I:P/A:C

Impact Score: 7.8

Exploitability Score: 3.4

Severity: MEDIUM

CVSS v3.0

Base Score: 5.3

Vector: CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H

Impact Score: 4.2

Exploitability Score: 1

Severity: MEDIUM

Vulnerable Software

Configuration 1

OR

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions up to 4.3.2 (inclusive)

Tenable Plugins

View all (38 total)

IDNameProductFamilySeverity
124989EulerOS Virtualization for ARM 64 3.0.1.0 : kernel (EulerOS-SA-2019-1536)NessusHuawei Local Security Checks
high
124801EulerOS Virtualization 3.0.1.0 : kernel (EulerOS-SA-2019-1477)NessusHuawei Local Security Checks
high
100238OracleVM 3.2 : Unbreakable / etc (OVMSA-2017-0106)NessusOracleVM Local Security Checks
critical
100235Oracle Linux 6 : Unbreakable Enterprise kernel (ELSA-2017-3567)NessusOracle Linux Local Security Checks
critical
99920F5 Networks BIG-IP : Linux kernel vulnerability (K20022580)NessusF5 Networks Local Security Checks
medium
99163OracleVM 3.3 : Unbreakable / etc (OVMSA-2017-0057) (Dirty COW)NessusOracleVM Local Security Checks
critical
99160Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2017-3534)NessusOracle Linux Local Security Checks
high
97120OracleVM 3.2 : Unbreakable / etc (OVMSA-2017-0041)NessusOracleVM Local Security Checks
medium
97119OracleVM 3.3 : Unbreakable / etc (OVMSA-2017-0040)NessusOracleVM Local Security Checks
medium
97118Oracle Linux 6 : Unbreakable Enterprise kernel (ELSA-2017-3516)NessusOracle Linux Local Security Checks
medium
97117Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2017-3515)NessusOracle Linux Local Security Checks
medium
93289SUSE SLES11 Security Update : kernel (SUSE-SU-2016:2074-1)NessusSuSE Local Security Checks
critical
93283SUSE SLES12 Security Update : kernel (SUSE-SU-2016:2014-1)NessusSuSE Local Security Checks
high
93280SUSE SLES12 Security Update : kernel (SUSE-SU-2016:2010-1)NessusSuSE Local Security Checks
high
93278SUSE SLES12 Security Update : kernel (SUSE-SU-2016:2006-1)NessusSuSE Local Security Checks
high
93277SUSE SLES12 Security Update : kernel (SUSE-SU-2016:2005-1)NessusSuSE Local Security Checks
high
93276SUSE SLES12 Security Update : kernel (SUSE-SU-2016:2002-1)NessusSuSE Local Security Checks
high
93275SUSE SLES12 Security Update : kernel (SUSE-SU-2016:2001-1)NessusSuSE Local Security Checks
high
93270SUSE SLES12 Security Update : kernel (SUSE-SU-2016:1995-1)NessusSuSE Local Security Checks
high
93104openSUSE Security Update : the Linux Kernel (openSUSE-2016-1015)NessusSuSE Local Security Checks
critical
92679Debian DSA-3426-1 : Linux Security UpdateNessusDebian Local Security Checks
medium
91736openSUSE Security Update : the Linux Kernel (openSUSE-2016-753)NessusSuSE Local Security Checks
critical
90884SUSE SLES11 Security Update : kernel (SUSE-SU-2016:1203-1)NessusSuSE Local Security Checks
critical
90264SUSE SLED11 / SLES11 Security Update : kernel (SUSE-SU-2016:0911-1)NessusSuSE Local Security Checks
critical
89993SUSE SLED12 / SLES12 Security Update : kernel (SUSE-SU-2016:0785-1)NessusSuSE Local Security Checks
critical
89400Fedora 23 : kernel-4.2.8-300.fc23 (2015-c59710b05d)NessusFedora Local Security Checks
medium
89393Fedora 22 : kernel-4.2.8-200.fc22 (2015-c1c2f5e168)NessusFedora Local Security Checks
medium
89022SUSE SLED12 / SLES12 Security Update : kernel (SUSE-SU-2016:0585-1)NessusSuSE Local Security Checks
high
88526Ubuntu 15.10 : linux-raspi2 vulnerabilities (USN-2890-3)NessusUbuntu Local Security Checks
critical
88525Ubuntu 14.04 LTS : linux-lts-wily vulnerabilities (USN-2890-2)NessusUbuntu Local Security Checks
critical
88524Ubuntu 15.10 : linux vulnerabilities (USN-2890-1)NessusUbuntu Local Security Checks
critical
88523Ubuntu 14.04 LTS : linux-lts-vivid vulnerabilities (USN-2889-2)NessusUbuntu Local Security Checks
critical
88522Ubuntu 15.04 : linux vulnerabilities (USN-2889-1)NessusUbuntu Local Security Checks
critical
88521Ubuntu 14.04 LTS : linux-lts-utopic vulnerabilities (USN-2888-1)NessusUbuntu Local Security Checks
medium
88520Ubuntu 12.04 LTS : linux-lts-trusty vulnerabilities (USN-2887-2)NessusUbuntu Local Security Checks
medium
88519Ubuntu 14.04 LTS : linux vulnerabilities (USN-2887-1)NessusUbuntu Local Security Checks
medium
88518Ubuntu 12.04 LTS : linux vulnerabilities (USN-2886-1)NessusUbuntu Local Security Checks
medium
87265Debian DLA-360-1 : linux-2.6 security updateNessusDebian Local Security Checks
medium