Description
The Linux kernel before 3.12, when UDP Fragmentation Offload (UFO) is enabled, does not properly initialize certain data structures, which allows local users to cause a denial of service (memory corruption and system crash) or possibly gain privileges via a crafted application that uses the UDP_CORK option in a setsockopt system call and sends both short and long packets, related to the ip_ufo_append_data function in net/ipv4/ip_output.c and the ip6_ufo_append_data function in net/ipv6/ip6_output.c.
Published: 2013-11-04
Score: 6.9 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2013-4338 The Linux kernel before 3.12, when UDP Fragmentation Offload (UFO) is enabled, does not properly initialize certain data structures, which allows local users to cause a denial of service (memory corruption and system crash) or possibly gain privileges via a crafted application that uses the UDP_CORK option in a setsockopt system call and sends both short and long packets, related to the ip_ufo_append_data function in net/ipv4/ip_output.c and the ip6_ufo_append_data function in net/ipv6/ip6_output.c.
Ubuntu USN Ubuntu USN USN-2040-1 Linux kernel (Quantal HWE) vulnerabilities
Ubuntu USN Ubuntu USN USN-2042-1 Linux kernel (Saucy HWE) vulnerabilities
Ubuntu USN Ubuntu USN USN-2043-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-2044-1 Linux kernel (OMAP4) vulnerabilities
Ubuntu USN Ubuntu USN USN-2046-1 Linux kernel (OMAP4) vulnerabilities
Ubuntu USN Ubuntu USN USN-2049-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-2050-1 Linux kernel (OMAP4) vulnerabilities
Ubuntu USN Ubuntu USN USN-2066-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-2067-1 Linux kernel (OMAP4) vulnerabilities
Ubuntu USN Ubuntu USN USN-2069-1 Linux kernel (Raring HWE) vulnerabilities
Ubuntu USN Ubuntu USN USN-2073-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-2233-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-2234-1 Linux kernel (EC2) vulnerabilities
History

Fri, 11 Jul 2025 13:45:00 +0000

Type Values Removed Values Added
Metrics epss

{'score': 0.00064}

epss

{'score': 0.00122}


Subscriptions

Linux Linux Kernel
Redhat Enterprise Linux Enterprise Mrg Rhel Eus
cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published:

Updated: 2024-08-06T16:45:14.830Z

Reserved: 2013-06-12T00:00:00.000Z

Link: CVE-2013-4470

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Deferred

Published: 2013-11-04T15:55:05.490

Modified: 2025-04-11T00:51:21.963

Link: CVE-2013-4470

cve-icon Redhat

Severity : Important

Publid Date: 2013-10-21T00:00:00Z

Links: CVE-2013-4470 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses