PT-2013-5076 · Linux+2 · Linux Kernel+2

Saran Neti · Publicado 2013-11-19 · Atualizado 2023-05-19 · CVE-2013-4563

Positive Technologies (AI Summary)

CVSS v2.0

7.1

Alta

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.13

Description The issue is related to the udp6 ufo fragment function in the Linux kernel, which does not properly perform a size comparison before inserting a fragment header when UDP Fragmentation Offload (UFO) is enabled. This allows remote attackers to cause a denial of service (panic) via a large IPv6 UDP packet.

Recommendations For Linux kernel versions prior to 3.13, update to version 3.13 or later to resolve the issue. As a temporary workaround, consider disabling UDP Fragmentation Offload (UFO) until a patch is available.

Exploit

Correção

DoS

Enumeração de Fraquezas

CWE-189

Identificadores relacionados

ALT-PU-2013-1264

ALT-PU-2013-1289

ALT-PU-2014-1547

CVE-2013-4563

OPENSUSE-SU-2014_0205-1

USN-2113-1

USN-2117-1

Produtos afetados

Alt Linux

Linux Kernel

Suse

Referências · 291

• 🔥 https://github.com/torvalds/linux/commit/0e033e04c2678dbbe74a46b23fffb7bb918c288e · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/recvmmsg_priv_esc.rb · Exploit
• 🔥 https://github.com/saelo/cve-2014-0038 · Exploit
• 🔥 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=0e033e04c2678dbbe74a46b23fffb7bb918c288e · Exploit
• https://github.com/torvalds/linux/commit/2690d97ade05c5325cbf7c72b94b90d265659886 · Nota
• https://github.com/torvalds/linux/commit/12ae030d54ef250706da5642fc7697cc60ad0df7 · Nota
• https://github.com/torvalds/linux/commit/a399b29dfbaaaf91162b2dc5a5875dd51bbfa2a1 · Nota
• https://github.com/torvalds/linux/commit/7314e613d5ff9f0934f7a0f74ed7973b903315d1 · Nota
• https://github.com/torvalds/linux/commit/fda4e2e85589191b123d31cdc21fd33ee70f50fd · Nota
• https://github.com/torvalds/linux/commit/b4789b8e6be3151a955ade74872822f30e8cd914 · Nota
• https://github.com/torvalds/linux/commit/b963a22e6d1a266a67e9eecc88134713fd54775c · Nota
• https://github.com/torvalds/linux/commit/cf970c002d270c36202bd5b9c2804d3097a52da0 · Nota
• https://github.com/torvalds/linux/commit/2def2ef2ae5f3990aabdbe8a755911902707d268 · Nota
• https://github.com/torvalds/linux/commit/17d68b763f09a9ce824ae23eb62c9efc57b69271 · Nota
• http://ubuntu.com/usn/USN-2113-1 · Aviso do Fabricante