CVE-2013-4348

Severity: high (CVSS 7.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 9.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2013-11-04 · updated 2026-06-16
Weakness: CWE-399

Description

The skb_flow_dissect function in net/core/flow_dissector.c in the Linux kernel through 3.12 allows remote attackers to cause a denial of service (infinite loop) via a small value in the IHL field of a packet with IPIP encapsulation.

Affected products

Canonical Ubuntu Linux: 12.04, 13.10
Linux kernel: from 3.2 before 3.2.54; from 3.3 before 3.4.70; from 3.5 before 3.10.20; from 3.11 before 3.11.9; from 3.12 before 3.12.1 — fixed in 3.10.20, 3.11.9, 3.12.1, 3.2.54, 3.4.70

How to fix

Upgrade to a fixed version: Linux kernel 3.10.20, 3.11.9, 3.12.1, 3.2.54. Check the vendor advisory for mitigations.

References

http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00002.html
http://rhn.redhat.com/errata/RHSA-2013-1490.html
http://www.ubuntu.com/usn/USN-2070-1
http://www.ubuntu.com/usn/USN-2075-1
https://bugzilla.redhat.com/show_bug.cgi?id=1007939
https://git.kernel.org/cgit/linux/kernel/git/davem/net.git/commit/?id=6f092343855a71e03b8d209815d8c45bf3a27fcd
http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00002.html
http://rhn.redhat.com/errata/RHSA-2013-1490.html
http://www.ubuntu.com/usn/USN-2070-1
http://www.ubuntu.com/usn/USN-2075-1
https://bugzilla.redhat.com/show_bug.cgi?id=1007939
https://git.kernel.org/cgit/linux/kernel/git/davem/net.git/commit/?id=6f092343855a71e03b8d209815d8c45bf3a27fcd

Get alerted when CVE-2013-4348 or the next vulnerability affects your stack