CVEvulnerability
CVE-2013-7470
5.9 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2019-04-23
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 5.9 MEDIUM — CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS 2.0 ([email protected])
- 7.1 HIGH — AV:N/AC:M/Au:N/C:N/I:N/A:C
- Weaknesses
- CWE-400
Description
cipso_v4_validate in include/net/cipso_ipv4.h in the Linux kernel before 3.11.7, when CONFIG_NETLABEL is disabled, allows attackers to cause a denial of service (infinite loop and crash), as demonstrated by icmpsic, a different vulnerability than CVE-2013-0310.
Affected configurations
• linux linux kernel (< 3.11.7)
Related
Weakness · CWE (1)
- CWE-400 Uncontrolled Resource Consumption weakness
References
- https://cdn.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.11.7 Vendor Advisory
- https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f2e5ddcc0d12f9c4c7b254358ad245c9dddce13b Patch, Vendor Advisory
- https://github.com/torvalds/linux/commit/f2e5ddcc0d12f9c4c7b254358ad245c9dddce13b Patch, Third Party Advisory
- https://support.f5.com/csp/article/K21914362 support.f5.com
- https://www.arista.com/en/support/advisories-notices/security-advisories/7098-security-advisory-40 www.arista.com
- https://cdn.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.11.7 Vendor Advisory
- https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f2e5ddcc0d12f9c4c7b254358ad245c9dddce13b Patch, Vendor Advisory
- https://github.com/torvalds/linux/commit/f2e5ddcc0d12f9c4c7b254358ad245c9dddce13b Patch, Third Party Advisory
- https://support.f5.com/csp/article/K21914362 support.f5.com
- https://www.arista.com/en/support/advisories-notices/security-advisories/7098-security-advisory-40 www.arista.com