CVE

Id
64510  
CVE No.
CVE-2013-4563  
Status
Candidate  
Description
The udp6_ufo_fragment function in net/ipv6/udp_offload.c in the Linux kernel through 3.12, when UDP Fragmentation Offload (UFO) is enabled, does not properly perform a certain size comparison before inserting a fragment header, which allows remote attackers to cause a denial of service (panic) via a large IPv6 UDP packet, as demonstrated by use of the Token Bucket Filter (TBF) queueing discipline.  
Phase
Assigned (20130612)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
635847 64510 CVE-2013-4563 MLIST:[oss-security] 20131113 CVE-2013-4563 -- Linux kernel: net: large udp packet over IPv6 over UFO-enabled device with TBF qdisc panic  View
635848 64510 CVE-2013-4563 URL:http://www.openwall.com/lists/oss-security/2013/11/13/9  View
635849 64510 CVE-2013-4563 CONFIRM:http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=0e033e04c2678dbbe74a46b23fffb7bb918c288e  View
635850 64510 CVE-2013-4563 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=1030015  View
635851 64510 CVE-2013-4563 CONFIRM:https://github.com/torvalds/linux/commit/0e033e04c2678dbbe74a46b23fffb7bb918c288e  View
635852 64510 CVE-2013-4563 SUSE:openSUSE-SU-2014:0205  View
635853 64510 CVE-2013-4563 URL:http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00003.html  View
635854 64510 CVE-2013-4563 UBUNTU:USN-2113-1  View
635855 64510 CVE-2013-4563 URL:http://www.ubuntu.com/usn/USN-2113-1  View
635856 64510 CVE-2013-4563 UBUNTU:USN-2117-1  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
23958 JVNDB-2013-005533 MediaWiki の Sanitizer::checkCss におけるクロスサイトスクリプティングの脆弱性 MediaWiki の Sanitizer::checkCss には、不完全なブラックリストにより、クロスサイトスクリプティング攻撃を実行される脆弱性が存在します。 CVE-2013-4568 64510 4.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005533.html  View