CVE-2013-2224 — Redhat Enterprise Linux vulnerability

5 documents5 sources
Severity
6.9MEDIUMNVD
EPSS
0.2%
top 60.03%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Redhat Enterprise LinuxDebian Linux
Timeline
PublishedJul 4
Latest updateMay 14

Description

A certain Red Hat patch for the Linux kernel 2.6.32 on Red Hat Enterprise Linux (RHEL) 6 allows local users to cause a denial of service (invalid free operation and system crash) or possibly gain privileges via a sendmsg system call with the IP_RETOPTS option, as demonstrated by hemlock.c. NOTE: this vulnerability exists because of an incorrect fix for CVE-2012-3552.

CVSS vector

AV:L/AC:M/C:C/I:C/A:CExploitability: 3.4 | Impact: 10.0

Affected Packages1 packages

▶debiandebian/linux

Also affects: Enterprise Linux 6.0

🔴Vulnerability Details

1
GHSA
GHSA-phqq-mhr3-p67h: A certain Red Hat patch for the Linux kernel 2↗2022-05-14
▶

📋Vendor Advisories

2
Red Hat
kernel: net: IP_REPOPTS invalid free↗2013-06-30
▶
Debian
CVE-2013-2224: linux - A certain Red Hat patch for the Linux kernel 2.6.32 on Red Hat Enterprise Linux ...↗2013
▶

💬Community

1
Bugzilla
CVE-2013-2224 kernel: net: IP_REPOPTS invalid free↗2013-07-01
▶