CVE-2013-4348

Linux Kernel < 3.2.54 - Resource Management Error

Title source: rule

Description

The skb_flow_dissect function in net/core/flow_dissector.c in the Linux kernel through 3.12 allows remote attackers to cause a denial of service (infinite loop) via a small value in the IHL field of a packet with IPIP encapsulation.

Exploits (1)

nomisec WORKING POC

by bl4ck5un · poc

https://github.com/bl4ck5un/cve-2013-4348

View Code ZIP pw:eip

References (6)

Core 6

Core References

Third Party Advisory vendor-advisory x_refsource_redhat

http://rhn.redhat.com/errata/RHSA-2013-1490.html

Issue Tracking, Third Party Advisory x_refsource_confirm

https://bugzilla.redhat.com/show_bug.cgi?id=1007939

Third Party Advisory vendor-advisory x_refsource_ubuntu

http://www.ubuntu.com/usn/USN-2070-1

Mailing List, Third Party Advisory vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00002.html

Third Party Advisory vendor-advisory x_refsource_ubuntu

http://www.ubuntu.com/usn/USN-2075-1

Exploit, Patch, Vendor Advisory x_refsource_confirm

https://git.kernel.org/cgit/linux/kernel/git/davem/net.git/commit/?id=6f092343855a71e03b8d209815d8c45bf3a27fcd

Scores

EPSS 0.0497

EPSS Percentile 89.7%

Details

CWE

CWE-399

Status published

Products (3)

canonical/ubuntu_linux 12.04

canonical/ubuntu_linux 13.10

linux/linux_kernel 3.2 - 3.2.54

Published Nov 04, 2013

Tracked Since Feb 18, 2026