Linux Kernel fib6_add_rt2node() Router Advertisement Processing Denial of Service vulnerability

Last Update Date: 16 Jul 2013 10:46 Release Date: 16 Jul 2013 3917 Views

RISK: Medium Risk

TYPE: Operating Systems - Linux

A vulnerability was identified in the Linux Kernel. A remote user can cause denial of service conditions.

A remote router advertisement speaker can modify the advertised expiration in certain cases to trigger a flaw in fib6_add_rt2node() and cause the target system to crash.

Impact

Denial of Service

System / Technologies affected

Linux Kernel Version 3.10.1 and prior versions

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

The vendor has issued a source code fix

Vulnerability Identifier

CVE-2013-4125

Source

SecurityTracker