NVD

Id
39817  
Name
CVE-2013-4162  
Description
The udp_v6_push_pending_frames function in net/ipv6/udp.c in the IPv6 implementation in the Linux kernel through 3.10.3 makes an incorrect function call for pending data, which allows local users to cause a denial of service (BUG and system crash) via a crafted application that uses the UDP_CORK option in a setsockopt system call.  
Reject
 
CVSS Version
2  
CVSS Score
4.7  
Severity
Medium  
CVSS Base Score
4.7  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-18  
Published
2013-07-29  
Modified Date
2014-01-03  
Seq
2013-4162  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
202537 39817 CVE-2013-4162 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=8822b64a0fa64a5dd1dfcf837c5b0be83f8c05d1  View
202538 39817 CVE-2013-4162 SUSE-SU-2013:1473  View
202539 39817 CVE-2013-4162 SUSE-SU-2013:1474  View
202540 39817 CVE-2013-4162 openSUSE-SU-2013:1971  View
202541 39817 CVE-2013-4162 RHSA-2013:1436  View
202542 39817 CVE-2013-4162 RHSA-2013:1460  View
202543 39817 CVE-2013-4162 RHSA-2013:1520  View
202544 39817 CVE-2013-4162 [oss-security] 20130723 Re: CVE Request: Linux kernel: panic while pushing pending data out of an IPv6 socket with UDP_CORK enabled.  View
202545 39817 CVE-2013-4162 61411  View
202546 39817 CVE-2013-4162 USN-1938-1  View
202547 39817 CVE-2013-4162 USN-1939-1  View
202548 39817 CVE-2013-4162 USN-1941-1  View
202549 39817 CVE-2013-4162 USN-1942-1  View
202550 39817 CVE-2013-4162 USN-1943-1  View
202551 39817 CVE-2013-4162 USN-1944-1  View
202552 39817 CVE-2013-4162 USN-1945-1  View
202553 39817 CVE-2013-4162 USN-1946-1  View
202554 39817 CVE-2013-4162 USN-1947-1  View
202555 39817 CVE-2013-4162 https://bugzilla.redhat.com/show_bug.cgi?id=987627  View
202556 39817 CVE-2013-4162 https://github.com/torvalds/linux/commit/8822b64a0fa64a5dd1dfcf837c5b0be83f8c05d1  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
21967 JVNDB-2013-003542 Linux Kernel の IPv6 の実装の net/ipv6/udp.c におけるサービス運用妨害 (DoS) の脆弱性 Linux Kernel の IPv6 の実装の net/ipv6/udp.c 内の udp_v6_push_pending_frames 関数は、保留中のデータに対して不正な関数の呼び出しを行うため、サービス運用妨害 (BUG およびシステムクラッシュ) 状態にされる脆弱性が存在します。 CVE-2013-4162 64104 CVE-2013-4162 39817 4.7 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-003542.html 2013-07-02 2013-12-26 View