CVE-2013-1827: Null Pointer Dereference
Last updated 24 July 2024
Other sources
Linux kernels built with Datagram Congestion Control Protocol(DCCP), are vulnerable to a NULL pointer dereference flaw. This occurs while accessing socket options of dccpsock objects via ccidhcrxgetsockopt & ccidhctxgetsockopt routines.
A user/program could use this flaw to crash the kernel, resulting in DoS.
Upstream fix: ------------- -> https://git.kernel.org/linus/276bdb82dedb290511467a5a4fdbe9f0b52dce6f
Reference: ---------- -> http://seclists.org/oss-sec/2013/q1/598
— Red Hat
net/dccp/ccid.h in the Linux kernel before 3.5.4 allows local users to gain privileges or cause a denial of service (NULL pointer dereference and system crash) by leveraging the CAPNETADMIN capability for a certain (1) sender or (2) receiver getsockopt call.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2013-1827?
CVE-2013-1827 has been classified as a high severity vulnerability due to the potential for denial of service.
How do I fix CVE-2013-1827?
To fix CVE-2013-1827, upgrade your Linux kernel to version 3.5.4 or later.
Which Linux kernel versions are affected by CVE-2013-1827?
CVE-2013-1827 affects Linux kernel versions up to and including 3.5.3.
What type of vulnerability is CVE-2013-1827?
CVE-2013-1827 is a NULL pointer dereference vulnerability that may lead to software crashes.
Can CVE-2013-1827 be exploited remotely?
Yes, CVE-2013-1827 can potentially be exploited remotely by sending crafted packets to the vulnerable system.