CVE-2013-4343 : Use-after-free vulnerability in drivers/net/tun.c in the Linux kernel through 3.

Use-after-free vulnerability in drivers/net/tun.c in the Linux kernel through 3.11.1 allows local users to gain privileges by leveraging the CAP_NET_ADMIN capability and providing an invalid tuntap interface name in a TUNSETIFF ioctl call.

Published 2013-09-25 10:31:29

Updated 2023-08-11 18:13:05

Source Red Hat, Inc.

View at NVD, CVE.org

Vulnerability category: Memory Corruption

Products affected by CVE-2013-4343

Linux » Linux Kernel
Versions from including (>=) 3.11 and before (<) 3.11.5
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Matching versions
Linux » Linux Kernel
Versions from including (>=) 3.8 and before (<) 3.10.16
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Matching versions
Canonical » Ubuntu Linux » Version: 13.04
cpe:2.3:o:canonical:ubuntu_linux:13.04:*:*:*:*:*:*:*
Matching versions
Canonical » Ubuntu Linux » Version: 13.10
cpe:2.3:o:canonical:ubuntu_linux:13.10:*:*:*:*:*:*:*
Matching versions

Threat overview for CVE-2013-4343

Top countries where our scanners detected CVE-2013-4343

Top open port discovered on systems with this issue 49152

IPs affected by CVE-2013-4343 260,881

Threat actors abusing to this issue? Yes

Find out if you^* are affected by CVE-2013-4343!

^*Directly or indirectly through your vendors, service providers and 3rd parties. Powered by attack surface intelligence from SecurityScorecard.

Exploit prediction scoring system (EPSS) score for CVE-2013-4343

EPSS FAQ

0.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 6 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2013-4343

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
6.9	MEDIUM	AV:L/AC:M/Au:N/C:C/I:C/A:C	3.4	10.0	NIST
Access Vector: Local Access Complexity: Medium Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete

CWE ids for CVE-2013-4343

CWE-399

Assigned by: nvd@nist.gov (Primary)

References for CVE-2013-4343

http://www.openwall.com/lists/oss-security/2013/09/12/3

oss-security - Fwd: Use-after-free in TUNSETIFF
Mailing List;Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00039.html

[security-announce] openSUSE-SU-2019:1570-1: important: Security update
Mailing List;Third Party Advisory

CVEs referencing this url
http://www.ubuntu.com/usn/USN-2020-1

USN-2020-1: Linux kernel (Raring HWE) vulnerabilities | Ubuntu security notices
Third Party Advisory

CVEs referencing this url
http://www.ubuntu.com/usn/USN-2023-1

USN-2023-1: Linux kernel vulnerabilities | Ubuntu security notices
Third Party Advisory

CVEs referencing this url
https://bugzilla.redhat.com/show_bug.cgi?id=1007733

1007733 – (CVE-2013-4343) CVE-2013-4343 Kernel: net: use-after-free TUNSETIFF
Issue Tracking;Third Party Advisory
http://www.ubuntu.com/usn/USN-2049-1

USN-2049-1: Linux kernel vulnerabilities | Ubuntu security notices
Third Party Advisory

CVEs referencing this url
http://rhn.redhat.com/errata/RHSA-2013-1490.html

RHSA-2013:1490 - Security Advisory - Red Hat Customer Portal
Third Party Advisory

CVEs referencing this url
http://marc.info/?l=linux-kernel&m=137889490510745&w=2

'[PATCH net V2] tuntap: correctly handle error in tun_set_iff()' - MARC
Mailing List;Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00071.html

[security-announce] openSUSE-SU-2019:1479-1: important: Security update
Mailing List;Third Party Advisory

CVEs referencing this url
http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00048.html

[security-announce] openSUSE-SU-2019:1579-1: important: Security update
Mailing List;Third Party Advisory

CVEs referencing this url
http://www.spinics.net/lists/netdev/msg250066.html

Use-after-free in TUNSETIFF — Netdev
Third Party Advisory