ByteOS Network

CVE Vulnerability Details :

CVE-2013-4470

PUBLISHED

More Info Official Page

Assigner-redhat

Assigner Org ID-53f830b8-0a3f-465b-8143-3b8a9948e749

Published At-04 Nov, 2013 | 11:00

Updated At-06 Aug, 2024 | 16:45

▼CVE Numbering Authority (CNA)

The Linux kernel before 3.12, when UDP Fragmentation Offload (UFO) is enabled, does not properly initialize certain data structures, which allows local users to cause a denial of service (memory corruption and system crash) or possibly gain privileges via a crafted application that uses the UDP_CORK option in a setsockopt system call and sends both short and long packets, related to the ip_ufo_append_data function in net/ipv4/ip_output.c and the ip6_ufo_append_data function in net/ipv6/ip6_output.c.

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=c547dbf55d5f8cf615ccc0e7265e98db27d3fb8b	x_refsource_CONFIRM
http://www.openwall.com/lists/oss-security/2013/10/25/5	mailing-list x_refsource_MLIST
http://www.ubuntu.com/usn/USN-2043-1	vendor-advisory x_refsource_UBUNTU
http://www.ubuntu.com/usn/USN-2073-1	vendor-advisory x_refsource_UBUNTU
http://www.ubuntu.com/usn/USN-2040-1	vendor-advisory x_refsource_UBUNTU
https://www.kernel.org/pub/linux/kernel/v3.x/patch-3.12.bz2	x_refsource_CONFIRM
http://www.ubuntu.com/usn/USN-2069-1	vendor-advisory x_refsource_UBUNTU
http://www.ubuntu.com/usn/USN-2044-1	vendor-advisory x_refsource_UBUNTU
http://rhn.redhat.com/errata/RHSA-2013-1801.html	vendor-advisory x_refsource_REDHAT
http://www.ubuntu.com/usn/USN-2066-1	vendor-advisory x_refsource_UBUNTU
http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00026.html	vendor-advisory x_refsource_SUSE
https://bugzilla.redhat.com/show_bug.cgi?id=1023477	x_refsource_CONFIRM
https://github.com/torvalds/linux/commit/c547dbf55d5f8cf615ccc0e7265e98db27d3fb8b	x_refsource_CONFIRM
http://www.ubuntu.com/usn/USN-2049-1	vendor-advisory x_refsource_UBUNTU
http://rhn.redhat.com/errata/RHSA-2014-0284.html	vendor-advisory x_refsource_REDHAT
http://www.securityfocus.com/bid/63359	vdb-entry x_refsource_BID
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e93b7d748be887cd7639b113ba7d7ef792a7efb9	x_refsource_CONFIRM
http://www.ubuntu.com/usn/USN-2050-1	vendor-advisory x_refsource_UBUNTU
http://www.ubuntu.com/usn/USN-2042-1	vendor-advisory x_refsource_UBUNTU
https://github.com/torvalds/linux/commit/e93b7d748be887cd7639b113ba7d7ef792a7efb9	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2014-0100.html	vendor-advisory x_refsource_REDHAT
http://www.ubuntu.com/usn/USN-2067-1	vendor-advisory x_refsource_UBUNTU
http://www.ubuntu.com/usn/USN-2046-1	vendor-advisory x_refsource_UBUNTU

Hyperlink: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=c547dbf55d5f8cf615ccc0e7265e98db27d3fb8b

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.openwall.com/lists/oss-security/2013/10/25/5

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: http://www.ubuntu.com/usn/USN-2043-1

Resource:

vendor-advisory

x_refsource_UBUNTU

Hyperlink: http://www.ubuntu.com/usn/USN-2073-1

Resource:

vendor-advisory

x_refsource_UBUNTU

Hyperlink: http://www.ubuntu.com/usn/USN-2040-1

Resource:

vendor-advisory

x_refsource_UBUNTU

Hyperlink: https://www.kernel.org/pub/linux/kernel/v3.x/patch-3.12.bz2

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.ubuntu.com/usn/USN-2069-1

Resource:

vendor-advisory

x_refsource_UBUNTU

Hyperlink: http://www.ubuntu.com/usn/USN-2044-1

Resource:

vendor-advisory

x_refsource_UBUNTU

Hyperlink: http://rhn.redhat.com/errata/RHSA-2013-1801.html

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: http://www.ubuntu.com/usn/USN-2066-1

Resource:

vendor-advisory

x_refsource_UBUNTU

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00026.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: https://bugzilla.redhat.com/show_bug.cgi?id=1023477

Resource:

x_refsource_CONFIRM

Hyperlink: https://github.com/torvalds/linux/commit/c547dbf55d5f8cf615ccc0e7265e98db27d3fb8b

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.ubuntu.com/usn/USN-2049-1

Resource:

vendor-advisory

x_refsource_UBUNTU

Hyperlink: http://rhn.redhat.com/errata/RHSA-2014-0284.html

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: http://www.securityfocus.com/bid/63359

Resource:

vdb-entry

x_refsource_BID

Hyperlink: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e93b7d748be887cd7639b113ba7d7ef792a7efb9

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.ubuntu.com/usn/USN-2050-1

Resource:

vendor-advisory

x_refsource_UBUNTU

Hyperlink: http://www.ubuntu.com/usn/USN-2042-1

Resource:

vendor-advisory

x_refsource_UBUNTU

Hyperlink: https://github.com/torvalds/linux/commit/e93b7d748be887cd7639b113ba7d7ef792a7efb9

Resource:

x_refsource_CONFIRM

Hyperlink: http://rhn.redhat.com/errata/RHSA-2014-0100.html

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: http://www.ubuntu.com/usn/USN-2067-1

Resource:

vendor-advisory

x_refsource_UBUNTU

Hyperlink: http://www.ubuntu.com/usn/USN-2046-1

Resource:

vendor-advisory

x_refsource_UBUNTU

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=c547dbf55d5f8cf615ccc0e7265e98db27d3fb8b	x_refsource_CONFIRM x_transferred
http://www.openwall.com/lists/oss-security/2013/10/25/5	mailing-list x_refsource_MLIST x_transferred
http://www.ubuntu.com/usn/USN-2043-1	vendor-advisory x_refsource_UBUNTU x_transferred
http://www.ubuntu.com/usn/USN-2073-1	vendor-advisory x_refsource_UBUNTU x_transferred
http://www.ubuntu.com/usn/USN-2040-1	vendor-advisory x_refsource_UBUNTU x_transferred
https://www.kernel.org/pub/linux/kernel/v3.x/patch-3.12.bz2	x_refsource_CONFIRM x_transferred
http://www.ubuntu.com/usn/USN-2069-1	vendor-advisory x_refsource_UBUNTU x_transferred
http://www.ubuntu.com/usn/USN-2044-1	vendor-advisory x_refsource_UBUNTU x_transferred
http://rhn.redhat.com/errata/RHSA-2013-1801.html	vendor-advisory x_refsource_REDHAT x_transferred
http://www.ubuntu.com/usn/USN-2066-1	vendor-advisory x_refsource_UBUNTU x_transferred
http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00026.html	vendor-advisory x_refsource_SUSE x_transferred
https://bugzilla.redhat.com/show_bug.cgi?id=1023477	x_refsource_CONFIRM x_transferred
https://github.com/torvalds/linux/commit/c547dbf55d5f8cf615ccc0e7265e98db27d3fb8b	x_refsource_CONFIRM x_transferred
http://www.ubuntu.com/usn/USN-2049-1	vendor-advisory x_refsource_UBUNTU x_transferred
http://rhn.redhat.com/errata/RHSA-2014-0284.html	vendor-advisory x_refsource_REDHAT x_transferred
http://www.securityfocus.com/bid/63359	vdb-entry x_refsource_BID x_transferred
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e93b7d748be887cd7639b113ba7d7ef792a7efb9	x_refsource_CONFIRM x_transferred
http://www.ubuntu.com/usn/USN-2050-1	vendor-advisory x_refsource_UBUNTU x_transferred
http://www.ubuntu.com/usn/USN-2042-1	vendor-advisory x_refsource_UBUNTU x_transferred
https://github.com/torvalds/linux/commit/e93b7d748be887cd7639b113ba7d7ef792a7efb9	x_refsource_CONFIRM x_transferred
http://rhn.redhat.com/errata/RHSA-2014-0100.html	vendor-advisory x_refsource_REDHAT x_transferred
http://www.ubuntu.com/usn/USN-2067-1	vendor-advisory x_refsource_UBUNTU x_transferred
http://www.ubuntu.com/usn/USN-2046-1	vendor-advisory x_refsource_UBUNTU x_transferred