Lucene search
HistorySep 25, 2013 - 10:31 a.m.
CVE-2013-4350
cve-2013-4350
linux kernel
ipv6
sctp
ipsec encryption
sensitive information
remote attackers
network sniffing
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
6.1 Medium
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
70.8%
The IPv6 SCTP implementation in net/sctp/ipv6.c in the Linux kernel through 3.11.1 uses data structures and function calls that do not trigger an intended configuration of IPsec encryption, which allows remote attackers to obtain sensitive information by sniffing the network.
Affected configurations
Node
linuxlinux_kernelMatch3.0rc1
ORlinuxlinux_kernelMatch3.0rc2
ORlinuxlinux_kernelMatch3.0rc3
ORlinuxlinux_kernelMatch3.0rc4
ORlinuxlinux_kernelMatch3.0rc5
ORlinuxlinux_kernelMatch3.0rc6
ORlinuxlinux_kernelMatch3.0rc7
ORlinuxlinux_kernelMatch3.0.1
ORlinuxlinux_kernelMatch3.0.2
ORlinuxlinux_kernelMatch3.0.3
ORlinuxlinux_kernelMatch3.0.4
ORlinuxlinux_kernelMatch3.0.5
ORlinuxlinux_kernelMatch3.0.6
ORlinuxlinux_kernelMatch3.0.7
ORlinuxlinux_kernelMatch3.0.8
ORlinuxlinux_kernelMatch3.0.9
ORlinuxlinux_kernelMatch3.0.10
ORlinuxlinux_kernelMatch3.0.11
ORlinuxlinux_kernelMatch3.0.12
ORlinuxlinux_kernelMatch3.0.13
ORlinuxlinux_kernelMatch3.0.14
ORlinuxlinux_kernelMatch3.0.15
ORlinuxlinux_kernelMatch3.0.16
ORlinuxlinux_kernelMatch3.0.17
ORlinuxlinux_kernelMatch3.0.18
ORlinuxlinux_kernelMatch3.0.19
ORlinuxlinux_kernelMatch3.0.20
ORlinuxlinux_kernelMatch3.0.21
ORlinuxlinux_kernelMatch3.0.22
ORlinuxlinux_kernelMatch3.0.23
ORlinuxlinux_kernelMatch3.0.24
ORlinuxlinux_kernelMatch3.0.25
ORlinuxlinux_kernelMatch3.0.26
ORlinuxlinux_kernelMatch3.0.27
ORlinuxlinux_kernelMatch3.0.28
ORlinuxlinux_kernelMatch3.0.29
ORlinuxlinux_kernelMatch3.0.30
ORlinuxlinux_kernelMatch3.0.31
ORlinuxlinux_kernelMatch3.0.32
ORlinuxlinux_kernelMatch3.0.33
ORlinuxlinux_kernelMatch3.0.34
ORlinuxlinux_kernelMatch3.0.35
ORlinuxlinux_kernelMatch3.0.36
ORlinuxlinux_kernelMatch3.0.37
ORlinuxlinux_kernelMatch3.0.38
ORlinuxlinux_kernelMatch3.0.39
ORlinuxlinux_kernelMatch3.0.40
ORlinuxlinux_kernelMatch3.0.41
ORlinuxlinux_kernelMatch3.0.42
ORlinuxlinux_kernelMatch3.0.43
ORlinuxlinux_kernelMatch3.0.44
ORlinuxlinux_kernelMatch3.0.45
ORlinuxlinux_kernelMatch3.0.46
ORlinuxlinux_kernelMatch3.0.47
ORlinuxlinux_kernelMatch3.0.48
ORlinuxlinux_kernelMatch3.0.49
ORlinuxlinux_kernelMatch3.0.50
ORlinuxlinux_kernelMatch3.0.51
ORlinuxlinux_kernelMatch3.0.52
ORlinuxlinux_kernelMatch3.0.53
ORlinuxlinux_kernelMatch3.0.54
ORlinuxlinux_kernelMatch3.0.55
ORlinuxlinux_kernelMatch3.0.56
ORlinuxlinux_kernelMatch3.0.57
ORlinuxlinux_kernelMatch3.0.58
ORlinuxlinux_kernelMatch3.0.59
ORlinuxlinux_kernelMatch3.0.60
ORlinuxlinux_kernelMatch3.0.61
ORlinuxlinux_kernelMatch3.0.62
ORlinuxlinux_kernelMatch3.0.63
ORlinuxlinux_kernelMatch3.0.64
ORlinuxlinux_kernelMatch3.0.65
ORlinuxlinux_kernelMatch3.0.66
ORlinuxlinux_kernelMatch3.0.67
ORlinuxlinux_kernelMatch3.0.68
ORlinuxlinux_kernelMatch3.1
ORlinuxlinux_kernelMatch3.1rc1
ORlinuxlinux_kernelMatch3.1rc2
ORlinuxlinux_kernelMatch3.1rc3
ORlinuxlinux_kernelMatch3.1rc4
ORlinuxlinux_kernelMatch3.1.1
ORlinuxlinux_kernelMatch3.1.2
ORlinuxlinux_kernelMatch3.1.3
ORlinuxlinux_kernelMatch3.1.4
ORlinuxlinux_kernelMatch3.1.5
ORlinuxlinux_kernelMatch3.1.6
ORlinuxlinux_kernelMatch3.1.7
ORlinuxlinux_kernelMatch3.1.8
ORlinuxlinux_kernelMatch3.1.9
ORlinuxlinux_kernelMatch3.1.10
ORlinuxlinux_kernelMatch3.2
ORlinuxlinux_kernelMatch3.2rc2
ORlinuxlinux_kernelMatch3.2rc3
ORlinuxlinux_kernelMatch3.2rc4
ORlinuxlinux_kernelMatch3.2rc5
ORlinuxlinux_kernelMatch3.2rc6
ORlinuxlinux_kernelMatch3.2rc7
ORlinuxlinux_kernelMatch3.2.1
ORlinuxlinux_kernelMatch3.2.2
ORlinuxlinux_kernelMatch3.2.3
ORlinuxlinux_kernelMatch3.2.4
ORlinuxlinux_kernelMatch3.2.5
ORlinuxlinux_kernelMatch3.2.6
ORlinuxlinux_kernelMatch3.2.7
ORlinuxlinux_kernelMatch3.2.8
ORlinuxlinux_kernelMatch3.2.9
ORlinuxlinux_kernelMatch3.2.10
ORlinuxlinux_kernelMatch3.2.11
ORlinuxlinux_kernelMatch3.2.12
ORlinuxlinux_kernelMatch3.2.13
ORlinuxlinux_kernelMatch3.2.14
ORlinuxlinux_kernelMatch3.2.15
ORlinuxlinux_kernelMatch3.2.16
ORlinuxlinux_kernelMatch3.2.17
ORlinuxlinux_kernelMatch3.2.18
ORlinuxlinux_kernelMatch3.2.19
ORlinuxlinux_kernelMatch3.2.20
ORlinuxlinux_kernelMatch3.2.21
ORlinuxlinux_kernelMatch3.2.22
ORlinuxlinux_kernelMatch3.2.23
ORlinuxlinux_kernelMatch3.2.24
ORlinuxlinux_kernelMatch3.2.25
ORlinuxlinux_kernelMatch3.2.26
ORlinuxlinux_kernelMatch3.2.27
ORlinuxlinux_kernelMatch3.2.28
ORlinuxlinux_kernelMatch3.2.29
ORlinuxlinux_kernelMatch3.2.30
ORlinuxlinux_kernelMatch3.3
ORlinuxlinux_kernelMatch3.3rc1
ORlinuxlinux_kernelMatch3.3rc2
ORlinuxlinux_kernelMatch3.3rc3
ORlinuxlinux_kernelMatch3.3rc4
ORlinuxlinux_kernelMatch3.3rc5
ORlinuxlinux_kernelMatch3.3rc6
ORlinuxlinux_kernelMatch3.3rc7
ORlinuxlinux_kernelMatch3.3.1
ORlinuxlinux_kernelMatch3.3.2
ORlinuxlinux_kernelMatch3.3.3
ORlinuxlinux_kernelMatch3.3.4
ORlinuxlinux_kernelMatch3.3.5
ORlinuxlinux_kernelMatch3.3.6
ORlinuxlinux_kernelMatch3.3.7
ORlinuxlinux_kernelMatch3.3.8
ORlinuxlinux_kernelMatch3.4
ORlinuxlinux_kernelMatch3.4rc1
ORlinuxlinux_kernelMatch3.4rc2
ORlinuxlinux_kernelMatch3.4rc3
ORlinuxlinux_kernelMatch3.4rc4
ORlinuxlinux_kernelMatch3.4rc5
ORlinuxlinux_kernelMatch3.4rc6
ORlinuxlinux_kernelMatch3.4rc7
ORlinuxlinux_kernelMatch3.4.1
ORlinuxlinux_kernelMatch3.4.2
ORlinuxlinux_kernelMatch3.4.3
ORlinuxlinux_kernelMatch3.4.4
ORlinuxlinux_kernelMatch3.4.5
ORlinuxlinux_kernelMatch3.4.6
ORlinuxlinux_kernelMatch3.4.7
ORlinuxlinux_kernelMatch3.4.8
ORlinuxlinux_kernelMatch3.4.10
ORlinuxlinux_kernelMatch3.4.11
ORlinuxlinux_kernelMatch3.4.12
ORlinuxlinux_kernelMatch3.4.13
ORlinuxlinux_kernelMatch3.4.14
ORlinuxlinux_kernelMatch3.4.15
ORlinuxlinux_kernelMatch3.4.16
ORlinuxlinux_kernelMatch3.4.17
ORlinuxlinux_kernelMatch3.4.18
ORlinuxlinux_kernelMatch3.4.19
ORlinuxlinux_kernelMatch3.4.20
ORlinuxlinux_kernelMatch3.4.21
ORlinuxlinux_kernelMatch3.4.22
ORlinuxlinux_kernelMatch3.4.23
ORlinuxlinux_kernelMatch3.4.24
ORlinuxlinux_kernelMatch3.4.25
ORlinuxlinux_kernelMatch3.4.26
ORlinuxlinux_kernelMatch3.4.27
ORlinuxlinux_kernelMatch3.4.28
ORlinuxlinux_kernelMatch3.4.29
ORlinuxlinux_kernelMatch3.4.30
ORlinuxlinux_kernelMatch3.4.31
ORlinuxlinux_kernelMatch3.4.32
ORlinuxlinux_kernelMatch3.5.1
ORlinuxlinux_kernelMatch3.5.2
ORlinuxlinux_kernelMatch3.5.3
ORlinuxlinux_kernelMatch3.5.4
ORlinuxlinux_kernelMatch3.5.5
ORlinuxlinux_kernelMatch3.5.6
ORlinuxlinux_kernelMatch3.5.7
ORlinuxlinux_kernelMatch3.6
ORlinuxlinux_kernelMatch3.6.1
ORlinuxlinux_kernelMatch3.6.2
ORlinuxlinux_kernelMatch3.6.3
ORlinuxlinux_kernelMatch3.6.4
ORlinuxlinux_kernelMatch3.6.5
ORlinuxlinux_kernelMatch3.6.6
ORlinuxlinux_kernelMatch3.6.7
ORlinuxlinux_kernelMatch3.6.8
ORlinuxlinux_kernelMatch3.6.9
ORlinuxlinux_kernelMatch3.6.10
ORlinuxlinux_kernelMatch3.6.11
ORlinuxlinux_kernelMatch3.7
ORlinuxlinux_kernelMatch3.7.1
ORlinuxlinux_kernelMatch3.7.2
ORlinuxlinux_kernelMatch3.7.3
ORlinuxlinux_kernelMatch3.7.4
ORlinuxlinux_kernelMatch3.7.5
ORlinuxlinux_kernelMatch3.7.6
ORlinuxlinux_kernelMatch3.7.7
ORlinuxlinux_kernelMatch3.7.8
ORlinuxlinux_kernelMatch3.7.9
ORlinuxlinux_kernelMatch3.7.10
ORlinuxlinux_kernelMatch3.8.0
ORlinuxlinux_kernelMatch3.8.1
ORlinuxlinux_kernelMatch3.8.2
ORlinuxlinux_kernelMatch3.8.3
ORlinuxlinux_kernelMatch3.8.4
ORlinuxlinux_kernelMatch3.8.5
ORlinuxlinux_kernelMatch3.8.6
ORlinuxlinux_kernelMatch3.8.7
ORlinuxlinux_kernelMatch3.8.8
ORlinuxlinux_kernelMatch3.8.9
ORlinuxlinux_kernelMatch3.8.10
ORlinuxlinux_kernelMatch3.8.11
ORlinuxlinux_kernelMatch3.8.12
ORlinuxlinux_kernelMatch3.8.13
ORlinuxlinux_kernelMatch3.9rc1
ORlinuxlinux_kernelMatch3.9rc2
ORlinuxlinux_kernelMatch3.9rc3
ORlinuxlinux_kernelMatch3.9rc4
ORlinuxlinux_kernelMatch3.9rc5
ORlinuxlinux_kernelMatch3.9rc6
ORlinuxlinux_kernelMatch3.9rc7
ORlinuxlinux_kernelMatch3.9.0
ORlinuxlinux_kernelMatch3.9.1
ORlinuxlinux_kernelMatch3.9.2
ORlinuxlinux_kernelMatch3.9.3
ORlinuxlinux_kernelMatch3.9.4
ORlinuxlinux_kernelMatch3.9.10
ORlinuxlinux_kernelMatch3.9.11
ORlinuxlinux_kernelMatch3.10.0
ORlinuxlinux_kernelMatch3.10.1
ORlinuxlinux_kernelMatch3.10.2
ORlinuxlinux_kernelMatch3.10.3
ORlinuxlinux_kernelMatch3.10.4
ORlinuxlinux_kernelMatch3.10.5
ORlinuxlinux_kernelMatch3.10.6
ORlinuxlinux_kernelMatch3.10.7
ORlinuxlinux_kernelMatch3.10.8
ORlinuxlinux_kernelMatch3.10.9
ORlinuxlinux_kernelMatch3.10.10
ORlinuxlinux_kernelMatch3.10.11
ORlinuxlinux_kernelMatch3.10.12
ORlinuxlinux_kernelMatch3.11
ORlinuxlinux_kernelMatch3.11.1
Node
linuxlinux_kernelRange≤3.11.1
ORlinuxlinux_kernelMatch3.10.5
ORlinuxlinux_kernelMatch3.10.6
ORlinuxlinux_kernelMatch3.10.7
ORlinuxlinux_kernelMatch3.10.8
ORlinuxlinux_kernelMatch3.10.9
ORlinuxlinux_kernelMatch3.10.10
ORlinuxlinux_kernelMatch3.10.11
ORlinuxlinux_kernelMatch3.10.12
ORlinuxlinux_kernelMatch3.11
References
git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=95ee62083cb6453e056562d91f597552021e6ae7
rhn.redhat.com/errata/RHSA-2013-1490.html
www.openwall.com/lists/oss-security/2013/09/13/3
www.ubuntu.com/usn/USN-2019-1
www.ubuntu.com/usn/USN-2021-1
www.ubuntu.com/usn/USN-2022-1
www.ubuntu.com/usn/USN-2024-1
www.ubuntu.com/usn/USN-2038-1
www.ubuntu.com/usn/USN-2039-1
www.ubuntu.com/usn/USN-2041-1
www.ubuntu.com/usn/USN-2045-1
www.ubuntu.com/usn/USN-2049-1
www.ubuntu.com/usn/USN-2050-1
bugzilla.redhat.com/show_bug.cgi?id=1007872
github.com/torvalds/linux/commit/95ee62083cb6453e056562d91f597552021e6ae7
Related
f5
f5
K74007441 : Linux kernel vulnerability CVE-2013-4350
2018-09-26 00:00:00
prion
prion
Code injection
2013-09-25 10:31:00
seebug
seebug
Linux Kernel 'sctp_v6_xmit()'函数信息泄露漏洞(CVE-2013-4350)
2013-09-18 00:00:00
nvd
nvd
CVE-2013-4350
2013-09-25 10:31:29
ubuntucve
ubuntucve
CVE-2013-4350
2013-09-25 00:00:00
debiancve
debiancve
CVE-2013-4350
2013-09-25 10:31:29
cvelist
cvelist
CVE-2013-4350
2013-09-25 10:00:00
nessus
nessus
Fedora 18 : kernel-3.10.12-100.fc18 (2013-17010)
2013-09-23 00:00:00
Fedora 19 : kernel-3.11.1-200.fc19 (2013-17012)
2013-09-19 00:00:00
Fedora 20 : kernel-3.11.1-300.fc20 (2013-16794)
2013-09-23 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: kernel-3.11.1-300.fc20
2013-09-23 00:36:45
[SECURITY] Fedora 19 Update: kernel-3.11.1-200.fc19
2013-09-19 02:05:03
[SECURITY] Fedora 19 Update: kernel-3.11.4-201.fc19
2013-10-14 07:12:01
openvas
openvas
Ubuntu Update for linux USN-2045-1
2013-12-04 00:00:00
Ubuntu Update for linux-lts-raring USN-2041-1
2013-12-04 00:00:00
Ubuntu: Security Advisory (USN-2041-1)
2013-12-04 00:00:00
ubuntu
ubuntu
Linux kernel vulnerabilities
2013-12-03 00:00:00
Linux kernel (Raring HWE) vulnerabilities
2013-12-03 00:00:00
Linux kernel vulnerabilities
2013-12-07 00:00:00
securityvulns
securityvulns
[ MDVSA-2013:265 ] kernel
2013-11-13 00:00:00
[USN-2049-1] Linux kernel vulnerabilities
2013-12-09 00:00:00
Linux kernel security vulnerabilities
2013-11-26 00:00:00
veracode
veracode
Arbitrary Code Execution
2019-05-02 04:56:54
Sensitive Information DIsclosure
2019-05-02 04:56:55
Heap-based Out-Of-Bounds Write
2019-05-02 04:56:54
redhat
redhat
(RHSA-2013:1490) Important: kernel-rt security and bug fix update
2013-10-31 00:00:00
mageia
mageia
Updated kernel-linus package fixes security vulnerabilites.
2013-11-22 23:00:03
Updated kernel-tmb package fixes security vulnerabilites.
2013-11-22 23:01:19
Updated kernel-vserver package fixes security vulnerabilites.
2013-11-22 23:06:50
oraclelinux
oraclelinux
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
6.1 Medium
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
70.8%
Related for CVE-2013-4350