imPC@ndo IT

Tracker / CVE-2013-1979

CVE-2013-1979

Medium 6.9

The scm_set_cred function in include/net/scm.h in the Linux kernel before 3.8.11 uses incorrect uid and gid values during credentials passing, which allows local users to gain privileges via a crafted application.

Affected products and versions

linux linux_kernel
linux linux_kernel · … → 3.8.10

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References