CVE-2013-4563

The udp6_ufo_fragment function in net/ipv6/udp_offload.c in the Linux kernel through 3.12, when UDP Fragmentation Offload (UFO) is enabled, does not properly…

published November 19, 2013

CVSS
—
EPSS
4%
Percentile
90.2
In the wild
Unconfirmed
What it is

The udp6_ufo_fragment function in net/ipv6/udp_offload.c in the Linux kernel through 3.12, when UDP Fragmentation Offload (UFO) is enabled, does not properly perform a certain size comparison before inserting a fragment header, which allows remote attackers to cause a denial of service (panic) via a large IPv6 UDP packet, as demonstrated by use of the Token Bucket Filter (TBF) queueing discipline.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03899 · 90.2th percentile
Published
2013-11-19T15:00Z
EPSS history
Timeline
  • 19 NOV 15:00Z
    The udp6_ufo_fragment function in net/ipv6/udp_offload.c in the Linux kernel through 3.12, when UDP Fragmentation Offload (UFO) is enabled, does not properly…
    cvelistv5