CVEvulnerability

CVE-2013-2017

7.8 HIGH Published 2013-05-03 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2013-05-03
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.8 HIGH — AV:N/AC:L/Au:N/C:N/I:N/A:C
Weaknesses
CWE-399

Description

The veth (aka virtual Ethernet) driver in the Linux kernel before 2.6.34 does not properly manage skbs during congestion, which allows remote attackers to cause a denial of service (system crash) by leveraging lack of skb consumption in conjunction with a double-free error.

Affected configurations

• linux linux kernel (<= 2.6.33.20) • linux linux kernel 2.6.33 • linux linux kernel 2.6.33.1 • linux linux kernel 2.6.33.2 • linux linux kernel 2.6.33.3 • linux linux kernel 2.6.33.4 • linux linux kernel 2.6.33.5 • linux linux kernel 2.6.33.6 • linux linux kernel 2.6.33.7 • linux linux kernel 2.6.33.8 • linux linux kernel 2.6.33.9 • linux linux kernel 2.6.33.10 • linux linux kernel 2.6.33.11 • linux linux kernel 2.6.33.12 • linux linux kernel 2.6.33.13 • linux linux kernel 2.6.33.14 • linux linux kernel 2.6.33.15 • linux linux kernel 2.6.33.16 • linux linux kernel 2.6.33.17 • linux linux kernel 2.6.33.18 • linux linux kernel 2.6.33.19

Related

Weakness · not in database (1)

References