PT-2019-7019 · Arista+2 · Eoskernel+2

David S. Miller + 2 · Publicado 2013-11-05 · Atualizado 2021-11-17 · CVE-2013-7470

Positive Technologies (AI Summary)

CVSS v2.0

7.1

Alta

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.11.7 EosKernel-3.4

Description The issue allows attackers to cause a denial of service, resulting in an infinite loop and crash. This can be triggered remotely through the network by sending certain malformed packets, specifically IP packets with rarely used packet options. The exposure is specific to certain EOS releases that use the affected EosKernel-3.4.

Recommendations For Linux kernel versions prior to 3.11.7, update to version 3.11.7 or later to resolve the issue. For EosKernel-3.4, follow the resolution steps documented in the relevant sections for the affected Arista EOS versions. As a temporary workaround, consider restricting network access to minimize the risk of exploitation.

Exploit

Correção

DoS

Resource Exhaustion

Enumeração de Fraquezas

CWE-400

Identificadores relacionados

ALT-PU-2013-1053

ALT-PU-2014-1422

CVE-2013-7470

Produtos afetados

Alt Linux

Eoskernel

Linux Kernel

Referências · 165

• 🔥 https://github.com/luan0ap/cve-2018-14634 · Exploit
• https://github.com/torvalds/linux/commit/d049f74f2dbe71354d43d393ac3a188947811348 · Nota
• https://github.com/torvalds/linux/commit/a8b33654b1e3b0c74d4a1fed041c9aae50b3c427 · Nota
• https://github.com/torvalds/linux/commit/2433c8f094a008895e66f25bd1773cdb01c91d01 · Nota
• https://github.com/torvalds/linux/commit/95ee62083cb6453e056562d91f597552021e6ae7 · Nota
• https://github.com/torvalds/linux/commit/a399b29dfbaaaf91162b2dc5a5875dd51bbfa2a1 · Nota
• https://github.com/torvalds/linux/commit/12ae030d54ef250706da5642fc7697cc60ad0df7 · Nota
• https://github.com/torvalds/linux/commit/2811ebac2521ceac84f2bdae402455baa6a7fb47 · Nota
• https://github.com/torvalds/linux/commit/f2e5ddcc0d12f9c4c7b254358ad245c9dddce13b · Correção
• https://github.com/torvalds/linux/commit/c547dbf55d5f8cf615ccc0e7265e98db27d3fb8b · Nota
• https://github.com/torvalds/linux/commit/201f99f170df14ba52ea4c52847779042b7a623b · Nota
• https://github.com/torvalds/linux/commit/929473ea05db455ad88cdc081f2adc556b8dc48f · Nota
• https://github.com/torvalds/linux/commit/2690d97ade05c5325cbf7c72b94b90d265659886 · Nota
• https://github.com/torvalds/linux/commit/6fb392b1a63ae36c31f62bc3fc8630b49d602b62 · Nota
• https://github.com/torvalds/linux/commit/e93b7d748be887cd7639b113ba7d7ef792a7efb9 · Nota