Oval Definition:oval:org.opensuse.security:def:20134343
Revision Date:2022-05-22Version:1
Title:CVE-2013-4343
Description:

Use-after-free vulnerability in drivers/net/tun.c in the Linux kernel through 3.11.1 allows local users to gain privileges by leveraging the CAP_NET_ADMIN capability and providing an invalid tuntap interface name in a TUNSETIFF ioctl call.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2013-4343
Mitre CVE-2013-4343
SUSE CVE-2013-4343
SUSE-SU-2019:1527-1
SUSE-SU-2019:1527-1
Platform(s):SUSE Linux Enterprise Desktop 11 SP3
SUSE Linux Enterprise Server 11 SP3
SUSE Linux Enterprise Server 12 SP3
SUSE Linux Enterprise Server for SAP Applications 12 SP3
Product(s):
Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Server 12 SP3 is installed
  • OR SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed
  • AND Package Information
  • kernel-azure-4.4.180-4.31.1 is installed
  • OR kernel-azure-base-4.4.180-4.31.1 is installed
  • OR kernel-azure-devel-4.4.180-4.31.1 is installed
  • OR kernel-devel-azure-4.4.180-4.31.1 is installed
  • OR kernel-source-azure-4.4.180-4.31.1 is installed
  • OR kernel-syms-azure-4.4.180-4.31.1 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3 is installed
  • AND Package Information
  • kernel-azure-4.4.180-4.31.1 is installed
  • OR kernel-azure-base-4.4.180-4.31.1 is installed
  • OR kernel-azure-devel-4.4.180-4.31.1 is installed
  • OR kernel-devel-azure-4.4.180-4.31.1 is installed
  • OR kernel-source-azure-4.4.180-4.31.1 is installed
  • OR kernel-syms-azure-4.4.180-4.31.1 is installed
  • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Desktop 11 SP3 is installed
  • OR SUSE Linux Enterprise Server 11 SP3 is installed
  • AND Package Information
  • kernel-default is not affected
  • OR kernel-source is not affected
  • Definition Synopsis
  • SUSE Linux Enterprise Server 11 SP3 is installed
  • AND Package Information
  • kernel-default is not affected
  • OR kernel-source is not affected
  • BACK