NVD

Id
40000  
Name
CVE-2013-4387  
Description
net/ipv6/ip6_output.c in the Linux kernel through 3.11.4 does not properly determine the need for UDP Fragmentation Offload (UFO) processing of small packets after the UFO queueing of a large packet, which allows remote attackers to cause a denial of service (memory corruption and system crash) or possibly have unspecified other impact via network traffic that triggers a large response packet.  
Reject
 
CVSS Version
2  
CVSS Score
6.1  
Severity
Medium  
CVSS Base Score
6.1  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
6.5  
CVSS Vector
(AV:A/AC:L/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-18  
Published
2013-10-10  
Modified Date
2014-03-26  
Seq
2013-4387  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
203510 40000 CVE-2013-4387 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=2811ebac2521ceac84f2bdae402455baa6a7fb47  View
203511 40000 CVE-2013-4387 RHSA-2013:1490  View
203512 40000 CVE-2013-4387 RHSA-2013:1645  View
203513 40000 CVE-2013-4387 RHSA-2014:0284  View
203514 40000 CVE-2013-4387 [oss-security] 20130928 Re: linux kernel memory corruption with ipv6 udp offloading  View
203515 40000 CVE-2013-4387 USN-2019-1  View
203516 40000 CVE-2013-4387 USN-2021-1  View
203517 40000 CVE-2013-4387 USN-2022-1  View
203518 40000 CVE-2013-4387 USN-2024-1  View
203519 40000 CVE-2013-4387 USN-2038-1  View
203520 40000 CVE-2013-4387 USN-2039-1  View
203521 40000 CVE-2013-4387 USN-2041-1  View
203522 40000 CVE-2013-4387 USN-2045-1  View
203523 40000 CVE-2013-4387 USN-2049-1  View
203524 40000 CVE-2013-4387 USN-2050-1  View
203525 40000 CVE-2013-4387 https://bugzilla.redhat.com/show_bug.cgi?id=1011927  View
203526 40000 CVE-2013-4387 https://github.com/torvalds/linux/commit/2811ebac2521ceac84f2bdae402455baa6a7fb47  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
23017 JVNDB-2013-004592 Linux Kernel の net/ipv6/ip6_output.c におけるサービス運用妨害 (DoS) の脆弱性 Linux Kernel の net/ipv6/ip6_output.c は、過度に大きなパケットの UDP Fragmentation Offload (UFO) キューイングの後に小さなパケットの UFO プロセッシング要求を適切に判定しないため、サービス運用妨害 (メモリの破損およびシステムクラッシュ) 状態にされるなど、不特定の影響を受ける脆弱性が存在します。 CVE-2013-4387 64329 CVE-2013-4387 40000 6.1 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-004592.html 2013-09-24 2015-08-06 View