Linux Kernel CVE-2013-4387 Memory Corruption Vulnerability
BID:62696
Info
Linux Kernel CVE-2013-4387 Memory Corruption Vulnerability
| Bugtraq ID: | 62696 |
| Class: | Design Error |
| CVE: |
CVE-2013-4387 |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 28 2013 12:00AM |
| Updated: | Apr 13 2015 10:16PM |
| Credit: | Dmitry Vyukov |
| Vulnerable: |
Ubuntu Ubuntu Linux 13.10 Ubuntu Ubuntu Linux 13.04 Ubuntu Ubuntu Linux 12.10 Ubuntu Ubuntu Linux 12.04 LTS i386 Ubuntu Ubuntu Linux 12.04 LTS amd64 Ubuntu Ubuntu Linux 12.04 LTS Ubuntu Ubuntu Linux 10.04 sparc Ubuntu Ubuntu Linux 10.04 powerpc Ubuntu Ubuntu Linux 10.04 i386 Ubuntu Ubuntu Linux 10.04 ARM Ubuntu Ubuntu Linux 10.04 amd64 SuSE SUSE Linux Enterprise Server 10 SP4 LTSS Redhat MRG Realtime for RHEL 6 Server 2 Redhat Enterprise Linux Workstation Optional 6 Redhat Enterprise Linux Workstation 6 Redhat Enterprise Linux Server Optional 6 Redhat Enterprise Linux Server EUS 6.4.z Redhat Enterprise Linux Server AUS 6.4 Redhat Enterprise Linux Server 6 Redhat Enterprise Linux HPC Node Optional 6 Redhat Enterprise Linux HPC Node 6 Redhat Enterprise Linux Desktop Optional 6 Redhat Enterprise Linux Desktop 6 Oracle Enterprise Linux 6.2 Oracle Enterprise Linux 6 Mandriva Business Server 1 X86 64 Mandriva Business Server 1 Linux kernel 3.11.3 Linux kernel 3.10.14 Linux kernel 3.4.64 Linux kernel 3.2.51 Linux kernel 3.0.98 Linux kernel 2.6.34.14 Linux kernel 2.6.32.61 Avaya one-X Client Enablement Services 6.2 Avaya IP Office Server Edition 9.0 Avaya IP Office Server Edition 8.1 Avaya IP Office Application Server 9.0 Avaya CMS r17 Avaya Aura Session Manager 6.3.1 Avaya Aura Session Manager 6.3 Avaya Aura Experience Portal 6.0.2 Avaya Aura Experience Portal 6.0.1 Avaya Aura Experience Portal 6.0 SP2 Avaya Aura Experience Portal 6.0 SP1 Avaya Aura Experience Portal 6.0 Avaya Aura Collaboration Environment 2.0 Avaya 96x1 IP Deskphones 6.2 |
| Not Vulnerable: | |
Discussion
Linux Kernel CVE-2013-4387 Memory Corruption Vulnerability
The Linux Kernel is prone to a memory-corruption vulnerability.
Attackers can exploit this issue to execute arbitrary code in contexts of the application or corrupt the kernel memory. Failed exploit attempts can result in a denial-of-service condition.
The Linux Kernel is prone to a memory-corruption vulnerability.
Attackers can exploit this issue to execute arbitrary code in contexts of the application or corrupt the kernel memory. Failed exploit attempts can result in a denial-of-service condition.
References
Linux Kernel CVE-2013-4387 Memory Corruption Vulnerability
References:
References:
- ipv6: udp packets following an UFO enqueued packet need also be handled by UFO (Hannes Frederic Sowa)
- Linux Homepage (Linux)
- Re: linux kernel memory corruption with ipv6 udp offloading (Dmitry Vyukov)
- Red Hat Enterprise Linux 6 kernel update (RHSA-2013-1645) (Avaya)
- Important: kernel security and bug fix update (Red Hat)
- USN-2049-1: Linux kernel vulnerabilities (Ubuntu)
- USN-2050-1: Linux kernel (OMAP4) vulnerabilities (Ubuntu)
- Wind River Linux kernel Security Update (WIND00439176 WIND00439172 WIND00439164 (Avaya)