net/dccp/ccid.h in the Linux kernel before 3.5.4 allows local users to gain privileges or cause a denial of service (NULL pointer dereference and system crash) by leveraging the CAP_NET_ADMIN capability for a certain (1) sender or (2) receiver getsockopt call.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Linux_kernel | Linux | * | 3.5.3 (including) |
Linux_kernel | Linux | 3.5.1 (including) | 3.5.1 (including) |
Linux_kernel | Linux | 3.5.2 (including) | 3.5.2 (including) |