Lucene search

K
cve[email protected]CVE-2013-4348
HistoryNov 04, 2013 - 3:55 p.m.

CVE-2013-4348

2013-11-0415:55:00
CWE-399
web.nvd.nist.gov
62
linux
kernel
denial of service
vulnerability
cve-2013-4348
nvd
skb_flow_dissect
flow_dissector

6.2 Medium

AI Score

Confidence

Low

7.1 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

0.03 Low

EPSS

Percentile

90.8%

The skb_flow_dissect function in net/core/flow_dissector.c in the Linux kernel through 3.12 allows remote attackers to cause a denial of service (infinite loop) via a small value in the IHL field of a packet with IPIP encapsulation.

6.2 Medium

AI Score

Confidence

Low

7.1 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

0.03 Low

EPSS

Percentile

90.8%