NetSight
IP …
low2.1

CVE-2013-7421

The Crypto API in the Linux kernel before 3.18.5 allows local users to load arbitrary kernel modules via a bind system call for an AF_ALG socket with a module …

Impact

The Crypto API in the Linux kernel before 3.18.5 allows local users to load arbitrary kernel modules via a bind system call for an AF_ALG socket with a module name in the salg_name field, a different vulnerability than CVE-2014-9644.

Affected products

VendorProductAffected versions
CanonicalUbuntu Linux
Versions 12.04, 14.04, 14.10
DebianDebian Linux
Versions 7.0, 8.0
LinuxLinux Kernel
before 3.18.5
OracleLinux
Versions 5, 6, 7

Weakness classification

CWE-269

References