The skb_flow_dissect function in net/core/flow_dissector.c in the Linux kernel through 3.12 allows remote attackers to cause a denial of service (infinite loop) via a small value in the IHL field of a packet with IPIP encapsulation.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade linux-vserver.Upgrade linux-grsec | Aug 30, 2017 | Nov 4, 2013 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Nov 4, 2013 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 16, 2024 | Nov 4, 2013 |
| Suse | — | Upgrade kernel-xen-baseUpgrade kernel-ec2Upgrade kernel-xen-develUpgrade kernel-trace-baseUpgrade kernel-symsUpgrade kernel-debugUpgrade kernel-develUpgrade kernel-vanillaUpgrade kernel-default-develUpgrade kernel-docsUpgrade kernel-xenUpgrade kernel-pae-develUpgrade kernel-default-baseUpgrade kernel-traceUpgrade kernel-desktopUpgrade kernel-debug-develUpgrade kernel-trace-develUpgrade kernel-paeUpgrade kernel-sourceUpgrade kernel-desktop-develUpgrade kernel-vanilla-develUpgrade kernel-pae-baseUpgrade kernel-debug-baseUpgrade kernel-defaultUpgrade kernel-ec2-develUpgrade kernel-ec2-baseUpgrade kernel-source-vanillaUpgrade kernel-desktop-base | Feb 17, 2015 | Nov 4, 2013 |
| Ubuntu | — | Upgrade linux-image-3.2.0-59-omapUpgrade linux-image-3.11.0-15-genericUpgrade linux-image-3.8.0-36-genericUpgrade linux-image-3.2.0-59-powerpc-smpUpgrade linux-image-3.5.0-45-genericUpgrade linux-image-3.11.0-15-generic-lpaeUpgrade linux-image-3.2.0-59-highbankUpgrade linux-image-3.2.0-59-generic-paeUpgrade linux-image-3.2.0-59-genericUpgrade linux-image-3.2.0-59-powerpc64-smpUpgrade linux-image-3.2.0-59-virtualUpgrade linux-image-3.2.0-1443-omap4 | Nov 8, 2024 | Nov 4, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub