VDB
CVE-2013-4350
CVE-2013-4350
REJECTED
The IPv6 SCTP implementation in net/sctp/ipv6.c in the Linux kernel through 3.11.1 uses data structures and function calls that do not trigger an intended configuration of IPsec encryption, which allows remote attackers to obtain sensitive information by sniffing the network.
EPSS 4.14% · 90.5th percentile
Risk Scores
EPSS Score
4.14%
90.5th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ubuntu:14.04:LTS | linux | 0, 3.11.0-12.19 |
Timeline
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 21, 2022 EPSS Score
- Jul 12, 2022 EPSS Score
- Oct 27, 2022 EPSS Score
- Dec 19, 2022 EPSS Score
- Feb 3, 2023 EPSS Score
- Feb 10, 2023 EPSS Score
- Feb 13, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 3, 2023 EPSS Score
- Jul 18, 2023 EPSS Score
References
- https://ubuntu.com/security/CVE-2013-4350 third-party-advisory
- http://www.openwall.com/lists/oss-security/2013/09/13 third-party-advisory
- https://ubuntu.com/security/notices/USN-2019-1 vendor-advisory
- https://ubuntu.com/security/notices/USN-2021-1 vendor-advisory
- https://ubuntu.com/security/notices/USN-2022-1 vendor-advisory
- https://ubuntu.com/security/notices/USN-2024-1 vendor-advisory
- https://ubuntu.com/security/notices/USN-2038-1 vendor-advisory
- https://ubuntu.com/security/notices/USN-2039-1 vendor-advisory
- https://ubuntu.com/security/notices/USN-2041-1 vendor-advisory
- https://ubuntu.com/security/notices/USN-2045-1 vendor-advisory
- https://ubuntu.com/security/notices/USN-2050-1 vendor-advisory
- https://ubuntu.com/security/notices/USN-2049-1 vendor-advisory
- https://www.cve.org/CVERecord?id=CVE-2013-4350 third-party-advisory