CVE-2013-6381: linux linux_kernel

Vulnerability summary

CVE-2013-6381 is a medium (CVSS 6.9) vulnerability in linux linux_kernel. EPSS estimates a 0.55% chance of exploitation in the next 30 days, higher than 46.1% of scored vulnerabilities. 1 public exploit is recorded.

Timeline

1. 27-11-2013
   PublishedVulnerability first disclosed.
2. 06-08-2024
   Last modifiedVulnerability information updated.

Description

Buffer overflow in the qeth_snmp_command function in drivers/s390/net/qeth_core_main.c in the Linux kernel through 3.12.1 allows local users to cause a denial of service or possibly have unspecified other impact via an SNMP ioctl call with a length value that is incompatible with the command-buffer size.

• CWE-119Improper Restriction of Operations within the Bounds of a Memory BufferThe product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary.