PT-2013-4965 · Linux+2 · Linux Kernel+2

Jason Wang

·

Published

2013-11-04

·

Updated

2023-05-19

·

CVE-2013-4348

CVSS v2.0

7.1

High

VectorAV:N/AC:M/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.13
Description The issue allows remote attackers to cause a denial of service, resulting in an infinite loop. This can be achieved by sending a packet with IPIP encapsulation that contains a small value in the IHL field.
Recommendations For Linux kernel versions prior to 3.13, update to version 3.13 or later to resolve the issue.

Exploit

Fix

DoS

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-399

Related Identifiers

ALT-PU-2013-1156
ALT-PU-2013-1163
ALT-PU-2014-1547
CVE-2013-4348
MGASA-2013-0342
MGASA-2013-0343
MGASA-2013-0344
MGASA-2013-0345
MGASA-2013-0346
MGASA-2013-0371
MGASA-2013-0372
MGASA-2013-0373
MGASA-2013-0374
MGASA-2013-0375
OPENSUSE-SU-2014_0204-1
RHSA-2013:1490
USN-2068-1
USN-2070-1
USN-2075-1
USN-2109-1
USN-2110-1
USN-2112-1

Affected Products

Alt Linux
Linux Kernel
Suse