NetSight
IP …
medium6.9

CVE-2013-4343

Use-after-free vulnerability in drivers/net/tun.c in the Linux kernel through 3.11.1 allows local users to gain privileges by leveraging the CAP_NET_ADMIN capa…

Impact

Use-after-free vulnerability in drivers/net/tun.c in the Linux kernel through 3.11.1 allows local users to gain privileges by leveraging the CAP_NET_ADMIN capability and providing an invalid tuntap interface name in a TUNSETIFF ioctl call.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 3.8 before 3.10.16
from 3.11 before 3.11.5
CanonicalUbuntu Linux
Versions 13.04, 13.10

Weakness classification

CWE-399

References