The ip6_append_data_mtu function in net/ipv6/ip6_output.c in the IPv6 implementation in the Linux kernel through 3.10.3 does not properly maintain information about whether the IPV6_MTU setsockopt option had been specified, which allows local users to cause a denial of service (BUG and system crash) via a crafted application that uses the UDP_CORK option in a setsockopt system call.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Jul 29, 2013 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 16, 2024 | Jul 28, 2013 |
| Suse | — | Upgrade kernel-bigsmp-baseUpgrade kernel-bigsmp-develUpgrade kernel-debug-baseUpgrade kernel-rt_trace-develUpgrade drbd-kmp-rtUpgrade cluster-network-kmp-traceUpgrade ocfs2-kmp-ppc64Upgrade gfs2-kmp-traceUpgrade kernel-source-rtUpgrade ocfs2-kmp-bigsmpUpgrade kernel-sourceUpgrade kernel-desktop-baseUpgrade kernel-syms-rtUpgrade ocfs2-kmp-traceUpgrade kernel-ec2-extraUpgrade kernel-default-extraUpgrade kernel-rt_traceUpgrade kernel-rtUpgrade kernel-default-manUpgrade kernel-pae-baseUpgrade ocfs2-kmp-rtUpgrade kernel-rt_trace-baseUpgrade SUSE-Linux-Enterprise-RT-releaseUpgrade gfs2-kmp-paeUpgrade ocfs2-kmp-paeUpgrade kernel-rt-baseUpgrade kernel-pae-extraUpgrade lttng-modules-kmp-rtUpgrade xen-kmp-traceUpgrade gfs2-kmp-ppc64Upgrade gfs2-kmp-bigsmpUpgrade kernel-vanilla-develUpgrade kernel-ec2-develUpgrade kernel-source-vanillaUpgrade kernel-desktop-develUpgrade kernel-traceUpgrade kernel-ppc64Upgrade kernel-ppc64-develUpgrade kernel-ec2-baseUpgrade iscsitarget-kmp-rtUpgrade xen-kmp-defaultUpgrade kernel-vanillaUpgrade kernel-docsUpgrade gfs2-kmp-defaultUpgrade kernel-ec2Upgrade sle-hae-releaseUpgrade cluster-network-kmp-defaultUpgrade kernel-rt-develUpgrade kernel-bigsmpUpgrade kernel-default-baseUpgrade drbd-kmp-rt_traceUpgrade cluster-network-kmp-rtUpgrade kernel-trace-extraUpgrade kernel-symsUpgrade kernel-xen-baseUpgrade kernel-xen-develUpgrade kernel-trace-develUpgrade ofed-kmp-rtUpgrade cluster-network-kmp-xenUpgrade kernel-ppc64-baseUpgrade ofed-kmp-rt_traceUpgrade kernel-pae-develUpgrade lttng-modules-kmp-rt_traceUpgrade ocfs2-kmp-defaultUpgrade cluster-network-kmp-ppc64Upgrade gfs2-kmp-xenUpgrade kernel-debugUpgrade kernel-defaultUpgrade ocfs2-kmp-xenUpgrade kernel-xen-extraUpgrade kernel-paeUpgrade ocfs2-kmp-rt_traceUpgrade kernel-debug-develUpgrade cluster-network-kmp-bigsmpUpgrade cluster-network-kmp-paeUpgrade kernel-default-develUpgrade kernel-develUpgrade iscsitarget-kmp-rt_traceUpgrade kernel-trace-baseUpgrade xen-kmp-paeUpgrade kernel-desktopUpgrade kernel-xenUpgrade cluster-network-kmp-rt_trace | Feb 17, 2015 | Jul 29, 2013 |
| Ubuntu | — | Upgrade linux-image-3.2.0-53-highbankUpgrade linux-image-3.5.0-232-omap4Upgrade linux-image-3.2.0-1437-omap4Upgrade linux-image-3.5.0-40-powerpc64-smpUpgrade linux-image-3.8.0-30-genericUpgrade linux-image-3.2.0-53-powerpc64-smpUpgrade linux-image-3.2.0-53-genericUpgrade linux-image-3.5.0-40-omapUpgrade linux-image-3.2.0-53-omapUpgrade linux-image-3.2.0-53-virtualUpgrade linux-image-3.2.0-53-generic-paeUpgrade linux-image-3.2.0-53-powerpc-smpUpgrade linux-image-3.5.0-40-genericUpgrade linux-image-3.5.0-40-highbankUpgrade linux-image-3.5.0-40-powerpc-smp | Nov 8, 2024 | Jul 29, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub