CVE-2013-4270

The net_ctl_permissions function in net/sysctl_net.c in the Linux kernel before 3.11.5 does not properly determine uid and gid values, which allows local users…

published December 9, 2013

CVSS
—
EPSS
1%
Percentile
45.0
In the wild
Unconfirmed
What it is

The net_ctl_permissions function in net/sysctl_net.c in the Linux kernel before 3.11.5 does not properly determine uid and gid values, which allows local users to bypass intended /proc/sys/net restrictions via a crafted application.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00547 · 45.0th percentile
Published
2013-12-09T18:00Z
EPSS history
Timeline
  • 09 DEC 18:00Z
    The net_ctl_permissions function in net/sysctl_net.c in the Linux kernel before 3.11.5 does not properly determine uid and gid values, which allows local users…
    cvelistv5