NVD

Id
39969  
Name
CVE-2013-4350  
Description
The IPv6 SCTP implementation in net/sctp/ipv6.c in the Linux kernel through 3.11.1 uses data structures and function calls that do not trigger an intended configuration of IPsec encryption, which allows remote attackers to obtain sensitive information by sniffing the network.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-18  
Published
2013-09-25  
Modified Date
2014-01-03  
Seq
2013-4350  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
203358 39969 CVE-2013-4350 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=95ee62083cb6453e056562d91f597552021e6ae7  View
203359 39969 CVE-2013-4350 RHSA-2013:1490  View
203360 39969 CVE-2013-4350 [oss-security] 20130913 Re: CVE request -- Linux kernel: net: sctp: ipv6 ipsec encryption bug in sctp_v6_xmit  View
203361 39969 CVE-2013-4350 USN-2019-1  View
203362 39969 CVE-2013-4350 USN-2021-1  View
203363 39969 CVE-2013-4350 USN-2022-1  View
203364 39969 CVE-2013-4350 USN-2024-1  View
203365 39969 CVE-2013-4350 USN-2038-1  View
203366 39969 CVE-2013-4350 USN-2039-1  View
203367 39969 CVE-2013-4350 USN-2041-1  View
203368 39969 CVE-2013-4350 USN-2045-1  View
203369 39969 CVE-2013-4350 USN-2049-1  View
203370 39969 CVE-2013-4350 USN-2050-1  View
203371 39969 CVE-2013-4350 https://bugzilla.redhat.com/show_bug.cgi?id=1007872  View
203372 39969 CVE-2013-4350 https://github.com/torvalds/linux/commit/95ee62083cb6453e056562d91f597552021e6ae7  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
22750 JVNDB-2013-004325 Linux Kernel の net/sctp/ipv6.c の IPv6 SCTP の実装における重要な情報を取得される脆弱性 Linux Kernel の net/sctp/ipv6.c の IPv6 SCTP の実装は、IPsec 暗号化の意図された設定を適用しないデータ構造および関数呼び出しを使用するため、重要な情報を取得される脆弱性が存在します。 CVE-2013-4350 64292 CVE-2013-4350 39969 5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-004325.html 2013-09-12 2014-01-09 View