CVE-2013-4348

Published: 4 November 2013

The skb_flow_dissect function in net/core/flow_dissector.c in the Linux kernel through 3.12 allows remote attackers to cause a denial of service (infinite loop) via a small value in the IHL field of a packet with IPIP encapsulation.

From the Ubuntu security team

Jason Wang discovered a bug in the network flow dissector in the Linux kernel. A remote attacker could exploit this flaw to cause a denial of service (infinite loop).

Status

References

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4348
• http://thread.gmane.org/gmane.linux.kernel/1588387
• https://ubuntu.com/security/notices/USN-2070-1
• https://ubuntu.com/security/notices/USN-2075-1
• https://ubuntu.com/security/notices/USN-2110-1
• https://ubuntu.com/security/notices/USN-2112-1
• https://ubuntu.com/security/notices/USN-2068-1
• https://ubuntu.com/security/notices/USN-2109-1
• NVD
• Launchpad
• Debian

Bugs

• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4348
• https://launchpad.net/bugs/1248700