PT-2013-4965 · Linux+2 · Linux Kernel+2

Jason Wang · Publicado 2013-11-04 · Atualizado 2023-05-19 · CVE-2013-4348

Positive Technologies (AI Summary)

CVSS v2.0

7.1

Alta

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.13

Description The issue allows remote attackers to cause a denial of service, resulting in an infinite loop. This can be achieved by sending a packet with IPIP encapsulation that contains a small value in the IHL field.

Recommendations For Linux kernel versions prior to 3.13, update to version 3.13 or later to resolve the issue.

Exploit

Correção

DoS

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

ALT-PU-2013-1156

ALT-PU-2013-1163

ALT-PU-2014-1547

CVE-2013-4348

MGASA-2013-0342

MGASA-2013-0343

MGASA-2013-0344

MGASA-2013-0345

MGASA-2013-0346

MGASA-2013-0371

MGASA-2013-0372

MGASA-2013-0373

MGASA-2013-0374

MGASA-2013-0375

OPENSUSE-SU-2014_0204-1

RHSA-2013:1490

USN-2068-1

USN-2070-1

USN-2075-1

USN-2109-1

USN-2110-1

USN-2112-1

Produtos afetados

Alt Linux

Linux Kernel

Suse

Referências · 379

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/recvmmsg_priv_esc.rb · Exploit
• 🔥 https://github.com/saelo/cve-2014-0038 · Exploit
• 🔥 https://git.kernel.org/cgit/linux/kernel/git/davem/net.git/commit/?id=6f092343855a71e03b8d209815d8c45bf3a27fcd · Exploit
• https://github.com/torvalds/linux/commit/2690d97ade05c5325cbf7c72b94b90d265659886 · Nota
• https://github.com/torvalds/linux/commit/12ae030d54ef250706da5642fc7697cc60ad0df7 · Nota
• https://github.com/torvalds/linux/commit/a399b29dfbaaaf91162b2dc5a5875dd51bbfa2a1 · Nota
• https://github.com/torvalds/linux/commit/7314e613d5ff9f0934f7a0f74ed7973b903315d1 · Nota
• https://github.com/torvalds/linux/commit/0e033e04c2678dbbe74a46b23fffb7bb918c288e · Nota
• https://github.com/torvalds/linux/commit/fda4e2e85589191b123d31cdc21fd33ee70f50fd · Nota
• https://github.com/torvalds/linux/commit/b4789b8e6be3151a955ade74872822f30e8cd914 · Nota
• https://github.com/torvalds/linux/commit/b963a22e6d1a266a67e9eecc88134713fd54775c · Nota
• https://github.com/torvalds/linux/commit/f5563318ff1bde15b10e736e97ffce13be08bc1a · Nota
• https://github.com/torvalds/linux/commit/ae7b4e1f213aa659aedf9c6ecad0bf5f0476e1e2 · Nota
• https://github.com/torvalds/linux/commit/2def2ef2ae5f3990aabdbe8a755911902707d268 · Nota
• https://github.com/torvalds/linux/commit/17d68b763f09a9ce824ae23eb62c9efc57b69271 · Nota