NVD

Id
39786  
Name
CVE-2013-4125  
Description
The fib6_add_rt2node function in net/ipv6/ip6_fib.c in the IPv6 stack in the Linux kernel through 3.10.1 does not properly handle Router Advertisement (RA) messages in certain circumstances involving three routes that initially qualified for membership in an ECMP route set until a change occurred for one of the first two routes, which allows remote attackers to cause a denial of service (system crash) via a crafted sequence of messages.  
Reject
 
CVSS Version
2  
CVSS Score
5.4  
Severity
Medium  
CVSS Base Score
5.4  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-18  
Published
2013-07-15  
Modified Date
2013-08-22  
Seq
2013-4125  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
202398 39786 CVE-2013-4125 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=307f2fb95e9b96b3577916e73d92e104f8f26494  View
202399 39786 CVE-2013-4125 FEDORA-2013-13536  View
202400 39786 CVE-2013-4125 FEDORA-2013-13663  View
202401 39786 CVE-2013-4125 [oss-security] 20130715 Re: CVE Request -- Linux kernel: ipv6: BUG_ON in fib6_add_rt2node()  View
202402 39786 CVE-2013-4125 61166  View
202403 39786 CVE-2013-4125 1028780  View
202404 39786 CVE-2013-4125 linux-cve20134125-dos(85645)  View
202405 39786 CVE-2013-4125 https://bugzilla.redhat.com/show_bug.cgi?id=984664  View
202406 39786 CVE-2013-4125 https://github.com/torvalds/linux/commit/307f2fb95e9b96b3577916e73d92e104f8f26494  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
21785 JVNDB-2013-003360 Linux Kernel の IPv6 スタックの net/ipv6/ip6_fib.c におけるサービス運用妨害 (DoS) の脆弱性 Linux Kernel の IPv6 スタックの net/ipv6/ip6_fib.c 内の fib6_add_rt2node 関数は、一緒に設定された 2 つの ECMP (等コストマルチパス) ルートの内の 1 つに変更が発生した場合に、ルータ広告 (Router Advertisement、RA) メッセージを適切に処理しないため、サービス運用妨害 (システムクラッシュ) 状態にされる脆弱性が存在します。 CVE-2013-4125 64067 CVE-2013-4125 39786 5.4 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-003360.html 2013-07-12 2013-07-17 View