CVE-2013-1979

Published: May 3, 2013Modified: Apr 29, 2026

6.9

Vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 3.4 / Impact: 10.0

Source: NVD

Description

The scm_set_cred function in include/net/scm.h in the Linux kernel before 3.8.11 uses incorrect uid and gid values during credentials passing, which allows local users to gain privileges via a crafted application.

Affected (11)

Products: Linux: Linux Kernel

1 product

Configuration A

11 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	version ≤ 3.8.10
Linux Linux Kernel	Version 3.8.0
Linux Linux Kernel	Version 3.8.1
Linux Linux Kernel	Version 3.8.2
Linux Linux Kernel	Version 3.8.3
Linux Linux Kernel	Version 3.8.4
Linux Linux Kernel	Version 3.8.5
Linux Linux Kernel	Version 3.8.6
Linux Linux Kernel	Version 3.8.7
Linux Linux Kernel	Version 3.8.8
Linux Linux Kernel	Version 3.8.9

Related CWEs

References (26)

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=83f1b4ba917db5dc5a061a44b3403ddb6e783494

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2013-April/103750.html

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2013-May/104480.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00016.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00018.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00006.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00007.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html

Source: secalert@redhat.com

http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.8.11

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDVSA-2013:176

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2013/04/29/1

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=955629

Source: secalert@redhat.com

https://github.com/torvalds/linux/commit/83f1b4ba917db5dc5a061a44b3403ddb6e783494

Source: secalert@redhat.com

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=83f1b4ba917db5dc5a061a44b3403ddb6e783494

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.fedoraproject.org/pipermail/package-announce/2013-April/103750.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.fedoraproject.org/pipermail/package-announce/2013-May/104480.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00016.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00018.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00006.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00007.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.8.11

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2013:176

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2013/04/29/1

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/show_bug.cgi?id=955629

Source: af854a3a-2127-422b-91ae-364da2661108

https://github.com/torvalds/linux/commit/83f1b4ba917db5dc5a061a44b3403ddb6e783494

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.