CVE-2013-4563 in Linuxinformazioni

Riassunto

di MITRE

The udp6_ufo_fragment function in net/ipv6/udp_offload.c in the Linux kernel through 3.12, when UDP Fragmentation Offload (UFO) is enabled, does not properly perform a certain size comparison before inserting a fragment header, which allows remote attackers to cause a denial of service (panic) via a large IPv6 UDP packet, as demonstrated by use of the Token Bucket Filter (TBF) queueing discipline.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Prenotare

12/06/2013

Divulgazione

20/11/2013

Moderazione

accettato

CPE

pronto

EPSS

0.03899

KEV

no

Attività

molto basso

Fonti

Want to stay up to date on a daily basis?

Enable the mail alert feature now!