CVE-2013-4387
SUSE Linux Enterprise Server 10 SP4 LTSS for AMD64 and Intel EM64T,SUSE Linux Enterprise Server 10 SP4 LTSS for IBM zSeries 64bit,SUSE Linux Enterprise Server 10 SP4 LTSS for x86
CVE-2013-4387, security advisory, novell, suse linux, suse, security, cve

CVE-2013-4387

Common Vulnerabilities and Exposures

[Previous] [Index] [Next]

Upstream information

CVE-2013-4387 at MITRE

Description

net/ipv6/ip6_output.c in the Linux kernel through 3.11.4 does not properly determine the need for UDP Fragmentation Offload (UFO) processing of small packets after the UFO queueing of a large packet, which allows remote attackers to cause a denial of service (memory corruption and system crash) or possibly have unspecified other impact via network traffic that triggers a large response packet.

SUSE information

CVSS v2 Scores
  National Vulnerability Database
Base Score 6.12
Vector AV:A/AC:L/Au:N/C:N/I:N/A:C
Access Vector Adjacent Network
Access Complexity Low
Authentication None
Confidentiality Impact None
Integrity Impact None
Availability Impact Complete
SUSE Bugzilla entries: 843430 [RESOLVED / FIXED], 848042 [CLOSED / FIXED]

SUSE Security Advisories:

List of released packages

Product(s) Fixed package version(s) References
SUSE Linux Enterprise Server 10 SP4 LTSS for IBM zSeries 64bit
  • kernel-default >= 2.6.16.60-0.105.1
  • kernel-source >= 2.6.16.60-0.105.1
  • kernel-syms >= 2.6.16.60-0.105.1
Builds
ZYPP Patch Nr: 8816
SUSE Linux Enterprise Server 10 SP4 LTSS for AMD64 and Intel EM64T
  • kernel-debug >= 2.6.16.60-0.105.1
  • kernel-default >= 2.6.16.60-0.105.1
  • kernel-kdump >= 2.6.16.60-0.105.1
  • kernel-smp >= 2.6.16.60-0.105.1
  • kernel-source >= 2.6.16.60-0.105.1
  • kernel-syms >= 2.6.16.60-0.105.1
  • kernel-xen >= 2.6.16.60-0.105.1
Builds
ZYPP Patch Nr: 8818
SUSE Linux Enterprise Server 10 SP4 LTSS for x86
  • kernel-bigsmp >= 2.6.16.60-0.105.1
  • kernel-debug >= 2.6.16.60-0.105.1
  • kernel-default >= 2.6.16.60-0.105.1
  • kernel-kdump >= 2.6.16.60-0.105.1
  • kernel-kdumppae >= 2.6.16.60-0.105.1
  • kernel-smp >= 2.6.16.60-0.105.1
  • kernel-source >= 2.6.16.60-0.105.1
  • kernel-syms >= 2.6.16.60-0.105.1
  • kernel-vmi >= 2.6.16.60-0.105.1
  • kernel-vmipae >= 2.6.16.60-0.105.1
  • kernel-xen >= 2.6.16.60-0.105.1
  • kernel-xenpae >= 2.6.16.60-0.105.1
Builds
ZYPP Patch Nr: 8817