VULNERABILITY INTELLIGENCE

CVE-2013-6432

CVSS score4.6 MEDIUM
EPSS probability0.47%
CISA KEVNot currently listed
Published2013-12-09
Last modified2026-06-17
CVSS vectorAV:L/AC:L/Au:S/C:N/I:N/A:C

Description

The ping_recvmsg function in net/ipv4/ping.c in the Linux kernel before 3.12.4 does not properly interact with read system calls on ping sockets, which allows local users to cause a denial of service (NULL pointer dereference and system crash) by leveraging unspecified privileges to execute a crafted application.

Primary references