NVD

Id
39818  
Name
CVE-2013-4163  
Description
The ip6_append_data_mtu function in net/ipv6/ip6_output.c in the IPv6 implementation in the Linux kernel through 3.10.3 does not properly maintain information about whether the IPV6_MTU setsockopt option had been specified, which allows local users to cause a denial of service (BUG and system crash) via a crafted application that uses the UDP_CORK option in a setsockopt system call.  
Reject
 
CVSS Version
2  
CVSS Score
4.7  
Severity
Medium  
CVSS Base Score
4.7  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-18  
Published
2013-07-29  
Modified Date
2013-10-02  
Seq
2013-4163  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
202557 39818 CVE-2013-4163 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=75a493e60ac4bbe2e977e7129d6d8cbb0dd236be  View
202558 39818 CVE-2013-4163 SUSE-SU-2013:1473  View
202559 39818 CVE-2013-4163 SUSE-SU-2013:1474  View
202560 39818 CVE-2013-4163 [oss-security] 20130723 Re: CVE request: Linux kernel: panic while appending data to a corked IPv6 socket in ip6_append_data_mtu  View
202561 39818 CVE-2013-4163 61412  View
202562 39818 CVE-2013-4163 USN-1938-1  View
202563 39818 CVE-2013-4163 USN-1941-1  View
202564 39818 CVE-2013-4163 USN-1942-1  View
202565 39818 CVE-2013-4163 USN-1943-1  View
202566 39818 CVE-2013-4163 USN-1944-1  View
202567 39818 CVE-2013-4163 USN-1945-1  View
202568 39818 CVE-2013-4163 USN-1946-1  View
202569 39818 CVE-2013-4163 USN-1947-1  View
202570 39818 CVE-2013-4163 https://bugzilla.redhat.com/show_bug.cgi?id=987633  View
202571 39818 CVE-2013-4163 https://github.com/torvalds/linux/commit/75a493e60ac4bbe2e977e7129d6d8cbb0dd236be  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
21968 JVNDB-2013-003543 Linux Kernel の IPv6 の実装の net/ipv6/ip6_output.c におけるサービス運用妨害 (DoS) の脆弱性 Linux Kernel の IPv6 の実装の net/ipv6/ip6_output.c 内の ip6_append_data_mtu 関数は、IPV6_MTU setsockopt オプションが指定されていたかどうかの情報を適切に管理しないため、サービス運用妨害 (BUG およびシステムクラッシュ) 状態にされる脆弱性が存在します。 CVE-2013-4163 64105 CVE-2013-4163 39818 4.7 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-003543.html 2013-07-02 2013-11-01 View