2015-03-01

2015-03-02

2015-03-03

All (2) Medium (3) Low (2)

CVE-2013-7421 LOW POC PATCH Monitor

The Crypto API in the Linux kernel before 3.18.5 allows local users to load arbitrary kernel modules via a bind system call for an AF_ALG socket with a module name in the salg_name field, a different. Rated low severity (CVSS 2.1), this vulnerability is low attack complexity. Public exploit code available.

Privilege Escalation Linux Ubuntu Linux Debian Linux Linux Kernel

NVD GitHub

CVSS 2.0

2.1

EPSS

0.0%

CVE-2014-9644 LOW PATCH Monitor

The Crypto API in the Linux kernel before 3.18.5 allows local users to load arbitrary kernel modules via a bind system call for an AF_ALG socket with a parenthesized module template expression in the. Rated low severity (CVSS 2.1), this vulnerability is low attack complexity. This Improper Privilege Management vulnerability could allow attackers to escalate privileges to gain unauthorized elevated access.

Privilege Escalation Linux Linux Kernel Debian Linux Ubuntu Linux

NVD GitHub

CVSS 2.0

2.1

EPSS

0.1%