NVD

Id
40070  
Name
CVE-2013-4470  
Description
The Linux kernel before 3.12, when UDP Fragmentation Offload (UFO) is enabled, does not properly initialize certain data structures, which allows local users to cause a denial of service (memory corruption and system crash) or possibly gain privileges via a crafted application that uses the UDP_CORK option in a setsockopt system call and sends both short and long packets, related to the ip_ufo_append_data function in net/ipv4/ip_output.c and the ip6_ufo_append_data function in net/ipv6/ip6_output.c.  
Reject
 
CVSS Version
2  
CVSS Score
6.9  
Severity
Medium  
CVSS Base Score
6.9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2013-11-04  
Modified Date
2014-03-26  
Seq
2013-4470  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
203852 40070 CVE-2013-4470 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=c547dbf55d5f8cf615ccc0e7265e98db27d3fb8b  View
203853 40070 CVE-2013-4470 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=e93b7d748be887cd7639b113ba7d7ef792a7efb9  View
203854 40070 CVE-2013-4470 RHSA-2014:0100  View
203855 40070 CVE-2013-4470 RHSA-2014:0284  View
203856 40070 CVE-2013-4470 [oss-security] 20131025 Re: CVE request: Linux kernel: net: memory corruption with UDP_CORK and UFO  View
203857 40070 CVE-2013-4470 63359  View
203858 40070 CVE-2013-4470 USN-2040-1  View
203859 40070 CVE-2013-4470 USN-2042-1  View
203860 40070 CVE-2013-4470 USN-2043-1  View
203861 40070 CVE-2013-4470 USN-2044-1  View
203862 40070 CVE-2013-4470 USN-2046-1  View
203863 40070 CVE-2013-4470 USN-2049-1  View
203864 40070 CVE-2013-4470 USN-2050-1  View
203865 40070 CVE-2013-4470 USN-2066-1  View
203866 40070 CVE-2013-4470 USN-2067-1  View
203867 40070 CVE-2013-4470 USN-2069-1  View
203868 40070 CVE-2013-4470 USN-2073-1  View
203869 40070 CVE-2013-4470 https://bugzilla.redhat.com/show_bug.cgi?id=1023477  View
203870 40070 CVE-2013-4470 https://github.com/torvalds/linux/commit/c547dbf55d5f8cf615ccc0e7265e98db27d3fb8b  View
203871 40070 CVE-2013-4470 https://github.com/torvalds/linux/commit/e93b7d748be887cd7639b113ba7d7ef792a7efb9  View
203872 40070 CVE-2013-4470 https://www.kernel.org/pub/linux/kernel/v3.x/patch-3.12.bz2  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
23426 JVNDB-2013-005001 Linux Kernel におけるサービス運用妨害 (DoS) の脆弱性 Linux Kernel は、UDP Fragmentation Offload (UFO) が有効になっている場合、特定のデータ構造を適切に初期化しないため、サービス運用妨害 (メモリ破損およびシステムクラッシュ) 状態にされる、または権限を取得される脆弱性が存在します。 CVE-2013-4470 64412 CVE-2013-4470 40070 6.9 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005001.html 2013-10-19 2015-08-06 View