CVE-2013-5691 Privilege escalation in n/a

Medium 6.9 Published 23 Sep 2013 Updated 6 Aug 2024

Local attackers can exploit missing validation in IPv6 and ATM ioctl handlers to cause system panics or escalate privileges.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Local or same network only
Victim action needed: Not needed
Fix: Available

What is CVE-2013-5691?

CVE-2013-5691 is a medium-severity vulnerability in Freebsd Freebsd, published on 23 Sep 2013. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

The (1) IPv6 and (2) ATM ioctl request handlers in the kernel in FreeBSD 8.3 through 9.2-STABLE do not validate SIOCSIFADDR, SIOCSIFBRDADDR, SIOCSIFDSTADDR, and SIOCSIFNETMASK requests, which allows local users to perform link-layer actions, cause a denial of service (panic), or possibly gain privileges via a crafted application.

Weakness: CWE-264

Which versions are affected by CVE-2013-5691?

It affects 1 product.

Products include Freebsd Freebsd.

How do I fix CVE-2013-5691?

Apply the vendor's patch.

Is CVE-2013-5691 being exploited?

There is no known exploitation of CVE-2013-5691 in the wild and no public exploit code.

All Freebsd Freebsd vulnerabilities

Sources

Also known as GHSA-f498-92vf-jqgh.