CVE-2013-7470

Published: Apr 23, 2019Modified: Nov 21, 2024

5.9

Vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 2.2 / Impact: 3.6

Source: NVD

Description

cipso_v4_validate in include/net/cipso_ipv4.h in the Linux kernel before 3.11.7, when CONFIG_NETLABEL is disabled, allows attackers to cause a denial of service (infinite loop and crash), as demonstrated by icmpsic, a different vulnerability than CVE-2013-0310.

Affected Products (1)

CPE details will appear after the next data sync.

1 product

References (10)

https://cdn.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.11.7

Source: cve@mitre.org

Vendor Advisory

https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f2e5ddcc0d12f9c4c7b254358ad245c9dddce13b

Source: cve@mitre.org

PatchVendor Advisory

https://github.com/torvalds/linux/commit/f2e5ddcc0d12f9c4c7b254358ad245c9dddce13b

Source: cve@mitre.org

PatchThird Party Advisory

https://support.f5.com/csp/article/K21914362

Source: cve@mitre.org

https://www.arista.com/en/support/advisories-notices/security-advisories/7098-security-advisory-40

Source: cve@mitre.org

https://cdn.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.11.7

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f2e5ddcc0d12f9c4c7b254358ad245c9dddce13b

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

https://github.com/torvalds/linux/commit/f2e5ddcc0d12f9c4c7b254358ad245c9dddce13b

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party Advisory

https://support.f5.com/csp/article/K21914362

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.arista.com/en/support/advisories-notices/security-advisories/7098-security-advisory-40

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.