The skb_flow_dissect function in net/core/flow_dissector.c in the Linux kernel through 3.12 allows remote attackers to cause a denial of service (infinite loop) via a small value in the IHL field of a packet with IPIP encapsulation.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade linux-grsecUpgrade linux-vserver. | Aug 30, 2017 | Nov 4, 2013 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Nov 4, 2013 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 16, 2024 | Nov 4, 2013 |
| Suse | — | Upgrade kernel-pae-baseUpgrade kernel-desktop-develUpgrade kernel-desktop-baseUpgrade kernel-source-vanillaUpgrade kernel-sourceUpgrade kernel-ec2-develUpgrade kernel-debug-baseUpgrade kernel-vanilla-develUpgrade kernel-defaultUpgrade kernel-ec2-baseUpgrade kernel-symsUpgrade kernel-ec2Upgrade kernel-pae-develUpgrade kernel-trace-baseUpgrade kernel-paeUpgrade kernel-develUpgrade kernel-vanillaUpgrade kernel-trace-develUpgrade kernel-traceUpgrade kernel-desktopUpgrade kernel-default-baseUpgrade kernel-docsUpgrade kernel-xen-develUpgrade kernel-debug-develUpgrade kernel-xenUpgrade kernel-debugUpgrade kernel-xen-baseUpgrade kernel-default-devel | Feb 17, 2015 | Nov 4, 2013 |
| Ubuntu | — | Upgrade linux-image-3.2.0-1443-omap4Upgrade linux-image-3.2.0-59-genericUpgrade linux-image-3.2.0-59-virtualUpgrade linux-image-3.2.0-59-powerpc64-smpUpgrade linux-image-3.2.0-59-powerpc-smpUpgrade linux-image-3.5.0-45-genericUpgrade linux-image-3.2.0-59-omapUpgrade linux-image-3.8.0-36-genericUpgrade linux-image-3.11.0-15-generic-lpaeUpgrade linux-image-3.11.0-15-genericUpgrade linux-image-3.2.0-59-highbankUpgrade linux-image-3.2.0-59-generic-pae | Nov 8, 2024 | Nov 4, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub