{"id":"CVE-2013-1763","aliases":["BELL-CVE-2013-1763","EUVD-2013-1789","GHSA-xmh4-cqm8-6p2v","RHSA-2013:0622","UBUNTU-CVE-2013-1763"],"status":"published","title":"Array index error in the __sock_diag_rcv_msg function in net/core/sock_diag.c in the Linux kernel...","description":"Array index error in the __sock_diag_rcv_msg function in net/core/sock_diag.c in the Linux kernel before 3.7.10 allows local users to gain privileges via a large family value in a Netlink message.","severity":{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.04057,"percentile":0.9073,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-20"],"published":"2013-02-23T00:00:00Z","modified":"2026-06-28T10:07:48Z","exploits":[{"source":"exploitdb","id":"EDB-33336","title":"Linux Kernel 3.3 \u003c 3.8 (Ubuntu / Fedora 18) - 'sock_diag_handlers()' Local Privilege Escalation (3)","type":"local","platform":"linux","date":"2013-02-24","verified":true,"url":"https://www.exploit-db.com/exploits/33336"},{"source":"exploitdb","id":"EDB-24555","title":"Linux Kernel 3.3.x \u003c 3.7.x (Arch Linux x86-64) - 'sock_diag_handlers[]' Local Privilege Escalation (1)","type":"local","platform":"linux_x86-64","date":"2013-02-27","url":"https://www.exploit-db.com/exploits/24555"},{"source":"exploitdb","id":"EDB-24746","title":"Linux Kernel 3.7.10 (Ubuntu 12.10 x64) - 'sock_diag_handlers' Local Privilege Escalation (2)","type":"local","platform":"linux_x86-64","date":"2013-03-13","url":"https://www.exploit-db.com/exploits/24746"},{"source":"exploitdb","id":"EDB-44299","title":"Linux Kernel \u003c 3.5.0-23 (Ubuntu 12.04.2 x64) - 'SOCK_DIAG' SMEP Bypass Local Privilege Escalation","type":"local","platform":"linux_x86-64","date":"2015-08-26","url":"https://www.exploit-db.com/exploits/44299"},{"source":"pocgithub","id":"qkrtjsrbs315/CVE-2013-1763","title":"qkrtjsrbs315/CVE-2013-1763","date":"2022-02-01","url":"https://github.com/qkrtjsrbs315/CVE-2013-1763"}],"affected":[{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.11-rt30.25.el6rt"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.11-rt30.25.el6rt"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.11-rt30.25.el6rt"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.11-rt30.25.el6rt"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.11-rt30.25.el6rt"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.11-rt30.25.el6rt"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.11-rt30.25.el6rt"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.11-rt30.25.el6rt"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.11-rt30.25.el6rt"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-trace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.11-rt30.25.el6rt"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-trace-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.11-rt30.25.el6rt"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-trace-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.11-rt30.25.el6rt"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-vanilla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.11-rt30.25.el6rt"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-vanilla-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.11-rt30.25.el6rt"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-vanilla-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.11-rt30.25.el6rt"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"mrg-rt-release","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.11-rt30.25.el6rt"}]}],"bundled":5}],"products":[{"vendor":"linux","product":"linux_kernel"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=915052","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","report"]},{"url":"https://github.com/torvalds/linux/commit/6e601a53566d84e1ffd25e7b6fe0b6894ffd79c0","tags":["x_refsource_CONFIRM","x_transferred","Patch"]},{"url":"http://openwall.com/lists/oss-security/2013/02/25/12","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2013:176","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred","Broken Link"]},{"url":"http://www.ubuntu.com/usn/USN-1750-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory"]},{"url":"http://www.exploit-db.com/exploits/33336","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://www.openwall.com/lists/oss-security/2013/02/24/3","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00004.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://www.exploit-db.com/exploits/24746","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.7.10","tags":["x_refsource_CONFIRM","x_transferred","Broken Link"]},{"url":"http://www.ubuntu.com/usn/USN-1749-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory"]},{"url":"http://www.exploit-db.com/exploits/24555","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6e601a53566d84e1ffd25e7b6fe0b6894ffd79c0","tags":["x_refsource_CONFIRM","x_transferred","Broken Link"]},{"url":"http://www.ubuntu.com/usn/USN-1751-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-1763","tags":["advisory"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=6e601a53566d84e1ffd25e7b6fe0b6894ffd79c0"},{"url":"https://access.redhat.com/errata/RHSA-2013:0622","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-1763","tags":["report"]},{"url":"https://github.com/advisories/GHSA-xmh4-cqm8-6p2v"},{"url":"https://docs.bell-sw.com/security/cves/CVE-2013-1763","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=858396","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=875360","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=908693","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=911473","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=911937","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0622.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-4542","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-4542","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-4542","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-0268","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-0268","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-0268","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-0290","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-0290","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-0290","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-0871","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-0871","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-0871","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-1763","tags":["advisory","report"]},{"url":"https://ubuntu.com/security/CVE-2013-1763","tags":["report"]},{"url":"http://thread.gmane.org/gmane.linux.network/260061","tags":["report"]},{"url":"http://seclists.org/oss-sec/2013/q1/420","tags":["report"]},{"url":"https://rdot.org/forum/showthread.php?p=30828","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-1749-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-1750-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-1751-1","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2013-1763","description":"Array index error in the __sock_diag_rcv_msg function in net/core/sock_diag.c in the Linux kernel before 3.7.10 allows local users to gain privileges via a large family value in a Netlink message.","status":"published","published":"2013-02-28T19:00:00Z","modified":"2024-08-06T15:13:32.735Z","updated_at":"2026-11-02T14:34:58.534075Z"}],"euvd":[{"id":"EUVD-2013-1789","description":"Array index error in the __sock_diag_rcv_msg function in net/core/sock_diag.c in the Linux kernel before 3.7.10 allows local users to gain privileges via a large family value in a Netlink message.","status":"published","published":"2013-02-28T19:00:00Z","modified":"2024-08-06T15:13:32Z","updated_at":"2026-11-03T01:56:41.063727Z"}],"ghsa":[{"id":"GHSA-xmh4-cqm8-6p2v","title":"Array index error in the __sock_diag_rcv_msg function in net/core/sock_diag.c in the Linux kernel...","description":"Array index error in the __sock_diag_rcv_msg function in net/core/sock_diag.c in the Linux kernel before 3.7.10 allows local users to gain privileges via a large family value in a Netlink message.","status":"published","published":"2022-05-17T04:43:50Z","modified":"2023-02-10T05:06:25Z","cwes":["CWE-20"],"updated_at":"2026-11-02T14:54:01.789224Z"}],"nvd":[{"id":"CVE-2013-1763","description":"Array index error in the __sock_diag_rcv_msg function in net/core/sock_diag.c in the Linux kernel before 3.7.10 allows local users to gain privileges via a large family value in a Netlink message.","status":"published","published":"2013-02-28T19:55:01.417Z","modified":"2026-06-16T23:52:04.38Z","cvss":[{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:02:21.222658Z"}],"osv":[{"id":"BELL-CVE-2013-1763","title":"CVE-2013-1763 does not affect BellSoft software","status":"withdrawn","published":"2013-02-28T19:55:00Z","modified":"2026-01-28T07:20:00.384641Z","cvss":[{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high"}],"updated_at":"2026-11-02T15:28:13.47097Z"},{"id":"RHSA-2013:0622","title":"Red Hat Security Advisory: kernel-rt security and bug fix update","status":"published","published":"2024-09-13T08:01:18Z","modified":"2026-06-28T10:07:48Z","updated_at":"2026-11-02T15:53:01.993625Z"},{"id":"UBUNTU-CVE-2013-1763","description":"Array index error in the __sock_diag_rcv_msg function in net/core/sock_diag.c in the Linux kernel before 3.7.10 allows local users to gain privileges via a large family value in a Netlink message.","status":"withdrawn","published":"2013-02-23T00:00:00Z","modified":"2026-02-04T02:43:28.737251Z","updated_at":"2026-11-02T15:54:06.854805Z"}]}}