The Linux kernel before 3.12, when UDP Fragmentation Offload (UFO) is enabled, does not properly initialize certain data structures, which allows local users to cause a denial of service (memory corruption and system crash) or possibly gain privileges via a crafted application that uses the UDP_CORK option in a setsockopt system call and sends both short and long packets, related to the ip_ufo_append_data function in net/ipv4/ip_output.c and the ip6_ufo_append_data function in net/ipv6/ip6_output.c.
CVSS Details
- CVSS 3.1 Base Score: 7
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade linux-grsec | Aug 30, 2017 | Nov 4, 2013 |
| Centos_linux | — | Upgrade perfUpgrade kernel-headersUpgrade kernel-abi-whitelistsUpgrade kernel-docUpgrade kernel-debug-develUpgrade python-perfUpgrade kernel-firmwareUpgrade kernel-develUpgrade kernel-debugUpgrade kernel | Dec 1, 2016 | Nov 4, 2013 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Nov 4, 2013 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Nov 4, 2013 |
| Suse | — | Upgrade ext4dev-kmp-xenUpgrade sle-hae-releaseUpgrade iscsitarget-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade lttng-modules-kmp-rt_traceUpgrade kernel-debugUpgrade kernel-rt-baseUpgrade kernel-xen-baseUpgrade ocfs2-kmp-rt_traceUpgrade btrfs-kmp-defaultUpgrade kernel-pae-develUpgrade kernel-ppc64Upgrade kernel-xen-extraUpgrade cluster-network-kmp-traceUpgrade cluster-network-kmp-paeUpgrade gfs2-kmp-defaultUpgrade kernel-rt_trace-develUpgrade cluster-network-kmp-bigsmpUpgrade iscsitarget-kmp-rt_traceUpgrade kernel-paeUpgrade kernel-xenpaeUpgrade kernel-kdumppaeUpgrade ocfs2-kmp-xenUpgrade btrfs-kmp-xenUpgrade gfs2-kmp-xenUpgrade cluster-network-kmp-xenUpgrade ofed-kmp-rtUpgrade cluster-network-kmp-rtUpgrade kernel-xen-develUpgrade kernel-default-baseUpgrade drbd-kmp-rt_traceUpgrade ext4dev-kmp-traceUpgrade ofed-kmp-rt_traceUpgrade kernel-rt-develUpgrade xen-kmp-paeUpgrade cluster-network-kmp-rt_traceUpgrade xen-kmp-defaultUpgrade cluster-network-kmp-ppc64Upgrade kernel-trace-develUpgrade kernel-defaultUpgrade gfs2-kmp-paeUpgrade gfs2-kmp-bigsmpUpgrade ocfs2-kmp-ppc64Upgrade kernel-trace-baseUpgrade kernel-kdumpUpgrade lttng-modules-kmp-rtUpgrade kernel-rtUpgrade kernel-symsUpgrade kernel-ppc64-baseUpgrade kernel-rt_traceUpgrade kernel-sourceUpgrade xen-kmp-traceUpgrade SUSE-Linux-Enterprise-RT-releaseUpgrade cluster-network-kmp-defaultUpgrade kernel-pae-extraUpgrade ocfs2-kmp-traceUpgrade kernel-vmipaeUpgrade kernel-ec2-baseUpgrade hyper-v-kmp-defaultUpgrade kernel-syms-rtUpgrade btrfs-kmp-paeUpgrade ocfs2-kmp-rtUpgrade gfs2-kmp-ppc64Upgrade kernel-source-rtUpgrade ext4dev-kmp-paeUpgrade kernel-smpUpgrade kernel-xenUpgrade kernel-default-extraUpgrade hyper-v-kmp-traceUpgrade gfs2-kmp-traceUpgrade kernel-bigsmpUpgrade drbd-kmp-rtUpgrade kernel-pae-baseUpgrade ocfs2-kmp-paeUpgrade kernel-traceUpgrade kernel-default-develUpgrade kernel-vmiUpgrade ext4dev-kmp-defaultUpgrade kernel-ppc64-develUpgrade kernel-bigsmp-develUpgrade kernel-rt_trace-baseUpgrade ocfs2-kmp-bigsmpUpgrade kernel-default-manUpgrade kernel-bigsmp-baseUpgrade kernel-ec2-develUpgrade kernel-ec2Upgrade hyper-v-kmp-pae | Feb 17, 2015 | Nov 4, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.32-61-versatileUpgrade linux-image-2.6.32-61-serverUpgrade linux-image-3.2.0-58-powerpc64-smpUpgrade linux-image-2.6.32-61-ia64Upgrade linux-image-2.6.32-61-powerpc-smpUpgrade linux-image-3.5.0-44-genericUpgrade linux-image-2.6.32-61-sparc64Upgrade linux-image-3.5.0-44-powerpc64-smpUpgrade linux-image-2.6.32-61-powerpc64-smpUpgrade linux-image-3.2.0-58-generic-paeUpgrade linux-image-3.2.0-58-omapUpgrade linux-image-2.6.32-61-386Upgrade linux-image-3.2.0-58-genericUpgrade linux-image-2.6.32-61-genericUpgrade linux-image-3.5.0-44-powerpc-smpUpgrade linux-image-3.8.0-35-genericUpgrade linux-image-2.6.32-61-powerpcUpgrade linux-image-3.11.0-14-generic-lpaeUpgrade linux-image-3.2.0-58-highbankUpgrade linux-image-3.5.0-44-omapUpgrade linux-image-2.6.32-61-lpiaUpgrade linux-image-2.6.32-61-virtualUpgrade linux-image-3.2.0-1442-omap4Upgrade linux-image-2.6.32-61-preemptUpgrade linux-image-2.6.32-365-ec2Upgrade linux-image-3.2.0-58-powerpc-smpUpgrade linux-image-3.5.0-236-omap4Upgrade linux-image-2.6.32-61-generic-paeUpgrade linux-image-3.2.0-58-virtualUpgrade linux-image-3.5.0-44-highbankUpgrade linux-image-2.6.32-61-sparc64-smpUpgrade linux-image-3.11.0-14-generic | Nov 8, 2024 | Nov 4, 2013 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub