CVE-2013-4387 in Linux Kernel
Sumário (Inglês)
net/ipv6/ip6_output.c in the Linux kernel through 3.11.4 does not properly determine the need for UDP Fragmentation Offload (UFO) processing of small packets after the UFO queueing of a large packet, which allows remote attackers to cause a denial of service (memory corruption and system crash) or possibly have unspecified other impact via network traffic that triggers a large response packet.
Reservar
12/06/2013
Divulgação
10/10/2013
Inscrições
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerabilidade | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 10528 | Linux Kernel IPv6 ip6_output.c ip6_ufo_append_data Excesso de tampão | 119 | Prova de conceito | Correção oficial | CVE-2013-4387 |