CVE-2013-4125
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 4.7%
The fib6_add_rt2node function in net/ipv6/ip6_fib.c in the IPv6 stack in the Linux kernel through 3.10.1 does not properly handle Router Advertisement (RA) messages in certain circumstances involving three routes that initially qualified for membership in an ECMP route set until a change occurred for one of the first two routes, which allows remote attackers to cause a denial of service (system crash) via a crafted sequence of messages.
Affected products
n/a · n/aReferences
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=307f2fb95e9b96b3577916e73d92e104f8f26494http://lists.fedoraproject.org/pipermail/package-announce/2013-July/112454.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2013-July/112619.htmlhttps://bugzilla.redhat.com/show_bug.cgi?id=984664https://exchange.xforce.ibmcloud.com/vulnerabilities/85645https://github.com/torvalds/linux/commit/307f2fb95e9b96b3577916e73d92e104f8f26494http://www.openwall.com/lists/oss-security/2013/07/15/4http://www.securityfocus.com/bid/61166http://www.securitytracker.com/id/1028780