UBUNTU-CVE-2013-7446
Use-after-free vulnerability in net/unix/af_unix.c in the Linux kernel before 4.3.3 allows local users to bypass intended AF_UNIX socket permissions or cause a denial of service (panic) via crafted epoll_ctl calls.
02 / AFFECTED SOFTWARE
Affected packages
84 explicit affected versions
34 explicit affected versions
19 explicit affected versions
6 explicit affected versions
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
Use-after-free vulnerability in net/unix/af_unix.c in the Linux kernel before 4.3.3 allows local users to bypass intended AF_UNIX socket permissions or cause a denial of service (panic) via crafted epoll_ctl calls.
05 / REFERENCES
Further evidence
- http://www.openwall.com/lists/oss-security/2015/11/18/9
- https://bugzilla.redhat.com/show_bug.cgi?id=1273845
- https://groups.google.com/forum/#!topic/syzkaller/3twDUI4Cpm8
- https://ubuntu.com/security/CVE-2013-7446
- https://ubuntu.com/security/notices/USN-2886-1
- https://ubuntu.com/security/notices/USN-2886-2
- https://ubuntu.com/security/notices/USN-2887-1
- https://ubuntu.com/security/notices/USN-2887-2
- https://ubuntu.com/security/notices/USN-2888-1
- https://ubuntu.com/security/notices/USN-2889-1
- https://ubuntu.com/security/notices/USN-2889-2
- https://ubuntu.com/security/notices/USN-2890-1
- https://ubuntu.com/security/notices/USN-2890-2
- https://ubuntu.com/security/notices/USN-2890-3
- https://www.cve.org/CVERecord?id=CVE-2013-7446