CVE-2013-4387

Kernel: net: IPv6: panic when UFO=On for an interface

Published Oct 10, 2013 CVSS 2.0 · 6.1 Medium EPSS 2.6% KEV · Not listed
Description
net/ipv6/ip6_output.c in the Linux kernel through 3.11.4 does not properly determine the need for UDP Fragmentation Offload (UFO) processing of small packets after the UFO queueing of a large packet, which allows remote attackers to cause a denial of service (memory corruption and system crash) or possibly have unspecified other impact via network traffic that triggers a large response packet.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2013-4268 net/ipv6/ip6_output.c in the Linux kernel through 3.11.4 does not properly determine the need for UDP Fragmentation Offload (UFO) processing of small packets after the UFO queueing of a large packet, which allows remote attackers to cause a denial of service (memory corruption and system crash) or possibly have unspecified other impact via network traffic that triggers a large response packet.
Ubuntu USN Ubuntu USN USN-2019-1 Linux kernel (Quantal HWE) vulnerabilities
Ubuntu USN Ubuntu USN USN-2021-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-2022-1 Linux kernel (OMAP4) vulnerabilities
Ubuntu USN Ubuntu USN USN-2024-1 Linux kernel (OMAP4) vulnerabilities
Ubuntu USN Ubuntu USN USN-2038-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-2039-1 Linux kernel (OMAP4) vulnerabilities
Ubuntu USN Ubuntu USN USN-2041-1 Linux kernel (Raring HWE) vulnerabilities
Ubuntu USN Ubuntu USN USN-2045-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-2049-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-2050-1 Linux kernel (OMAP4) vulnerabilities
Ubuntu USN Ubuntu USN USN-2233-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-2234-1 Linux kernel (EC2) vulnerabilities
History
Type Values Removed Values Added
Metrics epss

{'score': 0.00682}

epss

{'score': 0.00588}

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 6, 2024, 4:45 PM
Reserved
Jun 12, 2013, 12:00 AM
Status
Modified
Published
Oct 10, 2013, 10:55 AM
Modified
Jun 16, 2026, 11:57 PM
Severity
Important
Public date
Sep 21, 2013, 12:00 AM