Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2013-4348
HistoryNov 04, 2013 - 3:55 p.m.

CVE-2013-4348

2013-11-0415:55:05
CWE-399
[email protected]
web.nvd.nist.gov
1

7.1 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

7.1 High

AI Score

Confidence

High

0.03 Low

EPSS

Percentile

90.9%

JSON

The skb_flow_dissect function in net/core/flow_dissector.c in the Linux kernel through 3.12 allows remote attackers to cause a denial of service (infinite loop) via a small value in the IHL field of a packet with IPIP encapsulation.

Affected configurations

NVD
Node
linuxlinux_kernelRange3.2–3.2.54
OR
linuxlinux_kernelRange3.3–3.4.70
OR
linuxlinux_kernelRange3.5–3.10.20
OR
linuxlinux_kernelRange3.11–3.11.9
OR
linuxlinux_kernelRange3.12–3.12.1
Node
canonicalubuntu_linuxMatch12.04-
OR
canonicalubuntu_linuxMatch13.10

Related

prion 1
cvelist 1
cve 1
debiancve 1
ubuntucve 1
nessus 16
fedora 26
openvas 63
amazon 1
oraclelinux 2
ubuntu 6
securityvulns 4
veracode 11
redhat 1
suse 1
mageia 10
prion
prion
Design/Logic Flaw
2013-11-04 15:55:00
cvelist
cvelist
CVE-2013-4348
2013-11-04 11:00:00
cve
cve
CVE-2013-4348
2013-11-04 15:55:05
debiancve
debiancve
CVE-2013-4348
2013-11-04 15:55:05
ubuntucve
ubuntucve
CVE-2013-4348
2013-11-04 00:00:00
nessus
nessus
Fedora 18 : kernel-3.11.7-100.fc18 (2013-20748)
2013-11-13 00:00:00
Fedora 20 : kernel-3.11.7-300.fc20 (2013-20705)
2013-11-11 00:00:00
Fedora 19 : kernel-3.11.6-201.fc19 (2013-20547)
2013-11-05 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: kernel-3.11.7-300.fc20
2013-11-10 07:57:32
[SECURITY] Fedora 19 Update: kernel-3.11.6-201.fc19
2013-11-05 02:59:47
[SECURITY] Fedora 19 Update: kernel-3.11.9-200.fc19
2013-11-24 03:49:23
openvas
openvas
Amazon Linux: Security Advisory (ALAS-2013-252)
2015-09-08 00:00:00
Oracle: Security Advisory (ELSA-2014-3046)
2015-10-06 00:00:00
Oracle: Security Advisory (ELSA-2014-3049)
2015-10-06 00:00:00
amazon
amazon
Medium: kernel
2013-12-02 20:30:00
oraclelinux
oraclelinux
unbreakable enterprise kernel security update
2014-07-18 00:00:00
unbreakable enterprise kernel security update
2014-07-23 00:00:00
ubuntu
ubuntu
Linux kernel (Raring HWE) vulnerabilities
2014-02-18 00:00:00
Linux kernel (Quantal HWE) vulnerabilities
2014-01-03 00:00:00
Linux kernel vulnerabilities
2014-01-03 00:00:00
securityvulns
securityvulns
[ MDVSA-2013:265 ] kernel
2013-11-13 00:00:00
[USN-2075-1] Linux kernel vulnerabilities
2014-01-08 00:00:00
Linux kernel security vulnerabilities
2013-11-26 00:00:00
veracode
veracode
Denial Of Service (DoS)
2019-05-02 04:56:55
Denial Of Service (DoS)
2019-05-02 04:56:55
Use-After-Free
2019-05-02 04:56:55
redhat
redhat
(RHSA-2013:1490) Important: kernel-rt security and bug fix update
2013-10-31 00:00:00
suse
suse
kernel: security and bugfix update (important)
2014-02-06 19:04:40
mageia
mageia
Updated kernel-linus package fixes security vulnerabilites.
2013-11-22 23:00:03
Updated kernel-tmb package fixes security vulnerabilites.
2013-11-22 23:01:19
Updated kernel-vserver package fixes security vulnerabilites.
2013-11-22 23:06:50

7.1 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

7.1 High

AI Score

Confidence

High

0.03 Low

EPSS

Percentile

90.9%

JSON
Related for NVD:CVE-2013-4348
prion1cvelist1cve1debiancve1ubuntucve1nessus16fedora26openvas63amazon1oraclelinux2ubuntu6securityvulns4veracode11redhat1suse1mageia10