The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The udp6_ufo_fragment function in net/ipv6/udp_offload.c in the Linux kernel through 3.12, when UDP Fragmentation Offload (UFO) is enabled, does not properly perform a certain size comparison before inserting a fragment header, which allows remote attackers to cause a denial of service (panic) via a large IPv6 UDP packet, as demonstrated by use of the Token Bucket Filter (TBF) queueing discipline.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Nov 20, 2013 |
| Suse | — | Upgrade kernel-vanilla-develUpgrade kernel-traceUpgrade kernel-ec2-baseUpgrade kernel-ec2Upgrade kernel-pae-baseUpgrade kernel-ec2-develUpgrade kernel-desktop-develUpgrade kernel-desktop-baseUpgrade kernel-source-vanillaUpgrade kernel-debug-baseUpgrade kernel-sourceUpgrade kernel-pae-develUpgrade kernel-xen-baseUpgrade kernel-trace-develUpgrade kernel-default-develUpgrade kernel-paeUpgrade kernel-debug-develUpgrade kernel-symsUpgrade kernel-xen-develUpgrade kernel-xenUpgrade kernel-debugUpgrade kernel-develUpgrade kernel-trace-baseUpgrade kernel-defaultUpgrade kernel-default-baseUpgrade kernel-desktopUpgrade kernel-vanillaUpgrade kernel-docs | Feb 17, 2015 | Nov 20, 2013 |
| Ubuntu | — | Upgrade linux-image-3.11.0-17-genericUpgrade linux-image-3.11.0-17-generic-lpae | Nov 8, 2024 | Nov 20, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub