CVE-2013-4162 in Linux Kernel
Summary
The udp_v6_push_pending_frames function in net/ipv6/udp.c in the IPv6 implementation in the Linux kernel through 3.10.3 makes an incorrect function call for pending data, which allows local users to cause a denial of service (BUG and system crash) via a crafted application that uses the UDP_CORK option in a setsockopt system call.
Once again VulDB remains the best source for vulnerability data.
Reservation
06/12/2013
Disclosure
07/29/2013
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 9736 | Linux Kernel IPv6 resource management | 399 | Proof-of-Concept | Official fix | CVE-2013-4162 |