CVE-2013-0343
LowThe ipv6_create_tempaddr function in net/ipv6/addrconf.c in the Linux kernel through 3.8 does not properly handle problems with the generation of IPv6 temporary addresses, which allows remote attackers to cause a denial of service (excessive retries and address-generation outage), and consequently obtain sensitive information, via ICMPv6 Router Advertisement (RA) messages.
CVSS 2.0 score
3.2
AV:A/AC:H/Au:N/C:P/I:N/A:P
References
The following references provide additional information about CVE-2013-0343 including vendor advisories, patch commits, exploit details, and third-party analysis. Links are sourced from the NIST NVD database.
-
-
-
-
-
-
-
-
-
Ubuntu Securityhttp://www.ubuntu.com/usn/USN-1976-1
-
Ubuntu Securityhttp://www.ubuntu.com/usn/USN-1977-1
-
Ubuntu Securityhttp://www.ubuntu.com/usn/USN-2019-1
-
Ubuntu Securityhttp://www.ubuntu.com/usn/USN-2020-1
-
Ubuntu Securityhttp://www.ubuntu.com/usn/USN-2021-1
-
Ubuntu Securityhttp://www.ubuntu.com/usn/USN-2022-1
-
Ubuntu Securityhttp://www.ubuntu.com/usn/USN-2023-1
-
Ubuntu Securityhttp://www.ubuntu.com/usn/USN-2024-1
-
Ubuntu Securityhttp://www.ubuntu.com/usn/USN-2038-1
-
Ubuntu Securityhttp://www.ubuntu.com/usn/USN-2039-1
-
Ubuntu Securityhttp://www.ubuntu.com/usn/USN-2050-1
-
Frequently asked questions
-
What is CVE-2013-0343?
CVE-2013-0343 is a Low severity Linux kernel vulnerability with a CVSS score of 3.2 out of 10 . CVE-2013-0343 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
-
What is the CVSS score for CVE-2013-0343?
CVE-2013-0343 has a CVSS score of 3.2 out of 10, rated Low severity (CVSS 2.0). The vector string is
AV:A/AC:H/Au:N/C:P/I:N/A:P. -
Is there a patch available for CVE-2013-0343?
No patch is currently available for CVE-2013-0343. Monitor the NIST NVD and your Linux distribution's security advisories for updates.
-
Is CVE-2013-0343 actively exploited?
No — CVE-2013-0343 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.