Main
Vulnerability Database
Exploits
ID:6377 - Exploit for Input validation error in Linux kernel - CVE-2013-1763
ID:6377 - Exploit for Input validation error in Linux kernel - CVE-2013-1763
Published: June 17, 2021
Vulnerability identifier: #VU43049
Vulnerability risk: High
CVE-ID: CVE-2013-1763
CWE-ID: CWE-20
Exploitation vector: Remote access
Vulnerable software:
Linux kernel
Linux kernel
Link to public exploit:
Vulnerability description
The vulnerability allows a remote non-authenticated attacker to execute arbitrary code.
Array index error in the __sock_diag_rcv_msg function in net/core/sock_diag.c in the Linux kernel before 3.7.10 allows local users to gain privileges via a large family value in a Netlink message.
Remediation
Install update from vendor's website.