CVE-2013-4387 in Linux Kernel
Resumen (Inglés)
net/ipv6/ip6_output.c in the Linux kernel through 3.11.4 does not properly determine the need for UDP Fragmentation Offload (UFO) processing of small packets after the UFO queueing of a large packet, which allows remote attackers to cause a denial of service (memory corruption and system crash) or possibly have unspecified other impact via network traffic that triggers a large response packet.
Reservar
2013-06-12
Divulgación
2013-10-10
Voces
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerabilidad | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 10528 | Linux Kernel IPv6 ip6_output.c ip6_ufo_append_data desbordamiento de búfer | 119 | Prueba de concepto | Arreglo oficial | CVE-2013-4387 |