Skip to main content
← All vulnerabilities
CVE-2013-1763

Array index error in the __sock_diag_rcv_msg function in net/core/sock_diag.c in the Linux kernel before 3.7.10 allows local users to gain p

Published
Last modified
published
Not listed in CISA KEV
4 on Exploit-DB, 1 proof of concept on GitHub

Summary

Array index error in the __sock_diag_rcv_msg function in net/core/sock_diag.c in the Linux kernel before 3.7.10 allows local users to gain privileges via a large family value in a Netlink message.

Timeline

  1. Public exploit on Exploit-DB

    EDB-33336, EDB-24555, EDB-24746, EDB-44299

  2. CVE published
  3. Record last updated

Affected versions

  • n/a n/a

    Version range not reported

References 19

bugzilla.redhat.com

GitHub · torvalds/linux

openwall.com

mandriva.com

ubuntu.com

Exploit-DB

lists.opensuse.org

kernel.org

git.kernel.org

GitHub · qkrtjsrbs315/CVE-2013-1763