Описание
The udp_v6_push_pending_frames function in net/ipv6/udp.c in the IPv6 implementation in the Linux kernel through 3.10.3 makes an incorrect function call for pending data, which allows local users to cause a denial of service (BUG and system crash) via a crafted application that uses the UDP_CORK option in a setsockopt system call.
Отчет
This issue affects the versions of the Linux kernel as shipped with Red Hat Enterprise Linux 5, 6 and Red Hat Enterprise MRG 2. Future kernel updates for Red Hat Enterprise Linux 6 may address this issue.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 7 | kernel | Not affected | ||
| OpenStack 3 for RHEL 6 | kernel | Fixed | RHSA-2013:1520 | 14.11.2013 |
| Red Hat Enterprise Linux 5 | kernel | Fixed | RHSA-2013:1292 | 26.09.2013 |
| Red Hat Enterprise Linux 6 | kernel | Fixed | RHSA-2013:1436 | 16.10.2013 |
| Red Hat Enterprise MRG 2 | kernel-rt | Fixed | RHSA-2013:1264 | 16.09.2013 |
Показывать по
Дополнительная информация
Статус:
4.9 Medium
CVSS2
Связанные уязвимости
The udp_v6_push_pending_frames function in net/ipv6/udp.c in the IPv6 implementation in the Linux kernel through 3.10.3 makes an incorrect function call for pending data, which allows local users to cause a denial of service (BUG and system crash) via a crafted application that uses the UDP_CORK option in a setsockopt system call.
The udp_v6_push_pending_frames function in net/ipv6/udp.c in the IPv6 implementation in the Linux kernel through 3.10.3 makes an incorrect function call for pending data, which allows local users to cause a denial of service (BUG and system crash) via a crafted application that uses the UDP_CORK option in a setsockopt system call.
The udp_v6_push_pending_frames function in net/ipv6/udp.c in the IPv6 ...
The udp_v6_push_pending_frames function in net/ipv6/udp.c in the IPv6 implementation in the Linux kernel through 3.10.3 makes an incorrect function call for pending data, which allows local users to cause a denial of service (BUG and system crash) via a crafted application that uses the UDP_CORK option in a setsockopt system call.
Уязвимость операционной системы Linux, позволяющая злоумышленнику вызвать отказ в обслуживании
4.9 Medium
CVSS2