Beveiligingsadvies

CVE-2013-5691

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2013-09-23 10:00:00
Laatst bijgewerkt 2024-08-06 17:22:29
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

The (1) IPv6 and (2) ATM ioctl request handlers in the kernel in FreeBSD 8.3 through 9.2-STABLE do not validate SIOCSIFADDR, SIOCSIFBRDADDR, SIOCSIFDSTADDR, and SIOCSIFNETMASK requests, which allows local users to perform link-layer actions, cause a denial of service (panic), or possibly gain privileges via a crafted application.