NVD

Id
41487  
Name
CVE-2013-6431  
Description
The fib6_add function in net/ipv6/ip6_fib.c in the Linux kernel before 3.11.5 does not properly implement error-code encoding, which allows local users to cause a denial of service (NULL pointer dereference and system crash) by leveraging the CAP_NET_ADMIN capability for an IPv6 SIOCADDRT ioctl call.  
Reject
 
CVSS Version
2  
CVSS Score
4.7  
Severity
Medium  
CVSS Base Score
4.7  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-18  
Published
2013-12-09  
Modified Date
2014-03-05  
Seq
2013-6431  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
209634 41487 CVE-2013-6431 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=ae7b4e1f213aa659aedf9c6ecad0bf5f0476e1e2  View
209635 41487 CVE-2013-6431 openSUSE-SU-2014:0204  View
209636 41487 CVE-2013-6431 RHSA-2014:0100  View
209637 41487 CVE-2013-6431 http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.11.5  View
209638 41487 CVE-2013-6431 [oss-security] 20131206 Re: CVE request: Linux kernel: net: fib: fib6_add: potential NULL pointer dereference  View
209639 41487 CVE-2013-6431 https://bugzilla.redhat.com/show_bug.cgi?id=1039054  View
209640 41487 CVE-2013-6431 https://github.com/torvalds/linux/commit/ae7b4e1f213aa659aedf9c6ecad0bf5f0476e1e2  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
23864 JVNDB-2013-005439 Linux Kernel の net/ipv6/ip6_fib.c の fib6_add 関数におけるサービス運用妨害 (DoS) の脆弱性 Linux Kernel の net/ipv6/ip6_fib.c の fib6_add 関数は、エラーコードのエンコーディングを適切に実装しないため、サービス運用妨害 (NULL ポインタデリファレンスおよびシステムクラッシュ) 状態にされる脆弱性が存在します。 CVE-2013-6431 66373 CVE-2013-6431 41487 4.7 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005439.html 2013-10-13 2013-12-11 View