high7.2Public exploit code

CVE-2013-1763

Array index error in the __sock_diag_rcv_msg function in net/core/sock_diag.c in the Linux kernel before 3.7.10 allows local users to gain privileges via a lar…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Linux Kernel 3.3 < 3.8 (Ubuntu / Fedora 18) - 'sock_diag_handlers()' Local Privilege Escalation (3)2013-02-24 · local · linux · Verified
Linux Kernel < 3.5.0-23 (Ubuntu 12.04.2 x64) - 'SOCK_DIAG' SMEP Bypass Local Privilege Escalation2015-08-26 · local · linux_x86-64
Linux Kernel 3.7.10 (Ubuntu 12.10 x64) - 'sock_diag_handlers' Local Privilege Escalation (2)2013-03-13 · local · linux_x86-64
Linux Kernel 3.3.x < 3.7.x (Arch Linux x86-64) - 'sock_diag_handlers[]' Local Privilege Escalation (1)2013-02-27 · local · linux_x86-64

Impact

Array index error in the __sock_diag_rcv_msg function in net/core/sock_diag.c in the Linux kernel before 3.7.10 allows local users to gain privileges via a large family value in a Netlink message.

Affected products

Vendor	Product	Affected versions
Linux	Linux Kernel	from 3.3 before 3.4.34 from 3.5 before 3.7.10 from 3.8 before 3.8.1

Weakness classification

CWE-20

Public exploit code

Impact

Affected products

Weakness classification

References