CVE-2013-4300

Published: 25 September 2013

The scm_check_creds function in net/core/scm.c in the Linux kernel before 3.11 performs a capability check in an incorrect namespace, which allows local users to gain privileges via PID spoofing.

From the Ubuntu security team

A flaw was discovered in how the Linux Kernel's networking stack checks scm credentials when used with namespaces. A local attacker could exploit this flaw to gain privileges.

Status

References

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4300
• http://www.openwall.com/lists/oss-security/2013/09/04
• https://ubuntu.com/security/notices/USN-1995-1
• https://ubuntu.com/security/notices/USN-1998-1
• NVD
• Launchpad
• Debian

Bugs

• https://launchpad.net/bugs/1226495