Published: 04/11/2013 Updated: 19/05/2023

CVSS v2 Base Score: 7.1 | Impact Score: 6.9 | Exploitability Score: 8.6

VMScore: 633

Vector: AV:N/AC:M/Au:N/C:N/I:N/A:C

The skb_flow_dissect function in net/core/flow_dissector.c in the Linux kernel up to and including 3.12 allows remote malicious users to cause a denial of service (infinite loop) via a small value in the IHL field of a packet with IPIP encapsulation.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel
canonical ubuntu linux 13.10
canonical ubuntu linux 12.04

Synopsis Important: kernel-rt security and bug fix update Type/Severity Security Advisory: Important Topic Updated kernel-rt packages that fix multiple security issues and one bugare now available for Red Hat Enterprise MRG 24The Red Hat Security Response Team has rated this update as havingimportant secu ...

Several security issues were fixed in the kernel ...

The Linux kernel before 312, when UDP Fragmentation Offload (UFO) is enabled, does not properly initialize certain data structures, which allows local users to cause a denial of service (memory corruption and system crash) or possibly gain privileges via a crafted application that uses the UDP_CORK option in a setsockopt system call and sends both ...

CWE-399 https://git.kernel.org/cgit/linux/kernel/git/davem/net.git/commit/?id=6f092343855a71e03b8d209815d8c45bf3a27fcd https://bugzilla.redhat.com/show_bug.cgi?id=1007939 http://rhn.redhat.com/errata/RHSA-2013-1490.html http://www.ubuntu.com/usn/USN-2075-1 http://www.ubuntu.com/usn/USN-2070-1 http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00002.html https://access.redhat.com/errata/RHSA-2013:1490 https://nvd.nist.gov https://usn.ubuntu.com/2110-1/

CVE-2013-4348

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect