Total vulnerabilities in the database
The sock_alloc_send_pskb function in net/core/sock.c in the Linux kernel before 3.4.5 does not properly validate a certain length value, which allows local users to cause a denial of service (heap-based buffer overflow and system crash) or possibly gain privileges by leveraging access to a TUN/TAP device.
| Software | From | Fixed in |
|---|---|---|
| linux / linux_kernel | - | 3.0.37 |
| linux / linux_kernel | 3.1 | 3.2.23 |
| linux / linux_kernel | 3.3 | 3.4.5 |