U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

Vulnerability Change Records for CVE-2013-4470

Change History

CVE Modified by Red Hat, Inc. 2/12/2023 11:47:00 PM

Action Type Old Value New Value
Removed CVSS V2
Red Hat, Inc. (AV:L/AC:L/Au:N/C:C/I:C/A:C)

								
						
Changed Description
CVE-2013-4470 Kernel: net: memory corruption with UDP_CORK and UFO
The Linux kernel before 3.12, when UDP Fragmentation Offload (UFO) is enabled, does not properly initialize certain data structures, which allows local users to cause a denial of service (memory corruption and system crash) or possibly gain privileges via a crafted application that uses the UDP_CORK option in a setsockopt system call and sends both short and long packets, related to the ip_ufo_append_data function in net/ipv4/ip_output.c and the ip6_ufo_append_data function in net/ipv6/ip6_output.c.
Removed Reference
https://access.redhat.com/errata/RHSA-2013:1801 [No Types Assigned]

								
						
Removed Reference
https://access.redhat.com/errata/RHSA-2014:0100 [No Types Assigned]

								
						
Removed Reference
https://access.redhat.com/errata/RHSA-2014:0284 [No Types Assigned]

								
						
Removed Reference
https://access.redhat.com/security/cve/CVE-2013-4470 [No Types Assigned]