UBUNTU-CVE-2013-4470
Dashboard / Vulnerabilities / UBUNTU-CVE-2013-4470
UBUNTU-CVE-2013-4470
Summary:
Details: The Linux kernel before 3.12, when UDP Fragmentation Offload (UFO) is enabled, does not properly initialize certain data structures, which allows local users to cause a denial of service (memory corruption and system crash) or possibly gain privileges via a crafted application that uses the UDP_CORK option in a setsockopt system call and sends both short and long packets, related to the ip_ufo_append_data function in net/ipv4/ip_output.c and the ip6_ufo_append_data function in net/ipv6/ip6_output.c.
References: https://ubuntu.com/security/CVE-2013-4470, https://ubuntu.com/security/notices/USN-2040-1, https://ubuntu.com/security/notices/USN-2042-1, https://ubuntu.com/security/notices/USN-2043-1, https://ubuntu.com/security/notices/USN-2044-1, https://ubuntu.com/security/notices/USN-2046-1, https://ubuntu.com/security/notices/USN-2050-1, https://ubuntu.com/security/notices/USN-2049-1, https://ubuntu.com/security/notices/USN-2066-1, https://ubuntu.com/security/notices/USN-2067-1, https://ubuntu.com/security/notices/USN-2069-1, https://ubuntu.com/security/notices/USN-2073-1, https://ubuntu.com/security/notices/USN-2233-1, https://ubuntu.com/security/notices/USN-2234-1, https://www.cve.org/CVERecord?id=CVE-2013-4470
Affected packages
Package
Name: linux
Purl: pkg:deb/ubuntu/[email protected]?arch=source&distro=trusty
Affected ranges
Type: ECOSYSTEM
Events:
