CVE-2013-4563

Description

The udp6_ufo_fragment function in net/ipv6/udp_offload.c in the Linux kernel through 3.12, when UDP Fragmentation Offload (UFO) is enabled, does not properly perform a certain size comparison before inserting a fragment header, which allows remote attackers to cause a denial of service (panic) via a large IPv6 UDP packet, as demonstrated by use of the Token Bucket Filter (TBF) queueing discipline.

Risk Information

Base Score

7.5

MODERATE

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS Score

Exploitation Probability

1.558

Associated Vulnerability

Vulnerability	OS Platform
Linux hardware enablement kernel from Saucy (USN-2113-1) linux-image-3.11.0-17-generic_3.11.0-17.31~precise1_i386.deb	Linux
Linux hardware enablement kernel from Saucy (USN-2113-1) linux-image-3.11.0-17-generic_3.11.0-17.31~precise1_amd64.deb	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234