CVE-2013-4343

Linux Kernel < 3.10.16 - Use-After-Free in tuntap Interface Name Handling

Title source: llm

Description

Use-after-free vulnerability in drivers/net/tun.c in the Linux kernel through 3.11.1 allows local users to gain privileges by leveraging the CAP_NET_ADMIN capability and providing an invalid tuntap interface name in a TUNSETIFF ioctl call.

References (11)

Core 11

Core References

Third Party Advisory mailing-list x_refsource_mlist

http://www.spinics.net/lists/netdev/msg250066.html

Third Party Advisory vendor-advisory x_refsource_redhat

http://rhn.redhat.com/errata/RHSA-2013-1490.html

Issue Tracking, Third Party Advisory x_refsource_confirm

https://bugzilla.redhat.com/show_bug.cgi?id=1007733

Third Party Advisory vendor-advisory x_refsource_ubuntu

http://www.ubuntu.com/usn/USN-2020-1

Mailing List, Third Party Advisory mailing-list x_refsource_mlist

http://marc.info/?l=linux-kernel&m=137889490510745&w=2

Mailing List, Third Party Advisory mailing-list x_refsource_mlist

http://www.openwall.com/lists/oss-security/2013/09/12/3

Third Party Advisory vendor-advisory x_refsource_ubuntu

http://www.ubuntu.com/usn/USN-2049-1

Third Party Advisory vendor-advisory x_refsource_ubuntu

http://www.ubuntu.com/usn/USN-2023-1

Mailing List, Third Party Advisory vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00071.html

Mailing List, Third Party Advisory vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00039.html

Mailing List, Third Party Advisory vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00048.html

Scores

EPSS 0.0036

EPSS Percentile 27.9%

Details

CWE

CWE-399

Status published

Products (3)

canonical/ubuntu_linux 13.04

canonical/ubuntu_linux 13.10

linux/linux_kernel 3.8 - 3.10.16

Published Sep 25, 2013

Tracked Since Feb 18, 2026