CVE-2013-4162

Published July 29th, 2013

View on NVD ↗

CVSS v3

N/A

CVSS v2

4.7

MEDIUM

Affected

PROJECT

Description

The udp_v6_push_pending_frames function in net/ipv6/udp.c in the IPv6 implementation in the Linux kernel through 3.10.3 makes an incorrect function call for pending data, which allows local users to cause a denial of service (BUG and system crash) via a crafted application that uses the UDP_CORK option in a setsockopt system call.

torvalds/linux

Linux kernel source tree

GitHub

237K