NetSight
IP …
high7.1

CVE-2013-4348

The skb_flow_dissect function in net/core/flow_dissector.c in the Linux kernel through 3.12 allows remote attackers to cause a denial of service (infinite loop…

Impact

The skb_flow_dissect function in net/core/flow_dissector.c in the Linux kernel through 3.12 allows remote attackers to cause a denial of service (infinite loop) via a small value in the IHL field of a packet with IPIP encapsulation.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 3.2 before 3.2.54
from 3.3 before 3.4.70
from 3.5 before 3.10.20
from 3.11 before 3.11.9
from 3.12 before 3.12.1
CanonicalUbuntu Linux
Versions 12.04, 13.10

Weakness classification

CWE-399

References