DEBIAN-CVE-2013-4470

Advisory lineage Upstream: 1 Downstream: 1
Upstream
CVE-2013-4470
Downstream
DLA-0015-1
Published: 04 Nov 2013, 15:55
Last modified:28 Apr 2026, 20:10

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

04 Nov 2013, 15:55
Published
Vulnerability first disclosed
28 Apr 2026, 20:10
Last Modified
Vulnerability information updated

Description

The Linux kernel before 3.12, when UDP Fragmentation Offload (UFO) is enabled, does not properly initialize certain data structures, which allows local users to cause a denial of service (memory corruption and system crash) or possibly gain privileges via a crafted application that uses the UDP_CORK option in a setsockopt system call and sends both short and long packets, related to the ip_ufo_append_data function in net/ipv4/ip_output.c and the ip6_ufo_append_data function in net/ipv6/ip6_output.c.

Affected Systems

  • debian•linux

    < 3.11.7-1 | < 3.11.7-1 | < 3.11.7-1 | < 3.11.7-1

References (1)