NVD

Id
38134  
Name
CVE-2013-2017  
Description
The veth (aka virtual Ethernet) driver in the Linux kernel before 2.6.34 does not properly manage skbs during congestion, which allows remote attackers to cause a denial of service (system crash) by leveraging lack of skb consumption in conjunction with a double-free error.  
Reject
 
CVSS Version
2  
CVSS Score
7.8  
Severity
High  
CVSS Base Score
7.8  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-18  
Published
2013-05-03  
Modified Date
2013-05-03  
Seq
2013-2017  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
194952 38134 CVE-2013-2017 http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.34  View
194953 38134 CVE-2013-2017 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=6ec82562ffc6f297d0de36d65776cff8e5704867  View
194954 38134 CVE-2013-2017 [oss-security] 20130429 Re: CVE request -- Linux kernel: veth: double-free in case of congestion  View
194955 38134 CVE-2013-2017 https://bugzilla.redhat.com/show_bug.cgi?id=957705  View
194956 38134 CVE-2013-2017 https://github.com/torvalds/linux/commit/6ec82562ffc6f297d0de36d65776cff8e5704867  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
20982 JVNDB-2013-002557 Linux Kernel の veth ドライバにおけるサービス運用妨害 (DoS) の脆弱性 Linux Kernel の veth (別名 virtual Ethernet) ドライバは、混雑状態の間、skbs を適切に管理しないため、サービス運用妨害 (システムクラッシュ) 状態にされる脆弱性が存在します。 CVE-2013-2017 61959 CVE-2013-2017 38134 7.8 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-002557.html 2013-04-29 2013-05-07 View