CVE-2013-2017
linux linux kernel: no CVSS score yet. EPSS 4.2% chance of exploitation in the next 30 days.
The veth (aka virtual Ethernet) driver in the Linux kernel before 2.6.34 does not properly manage skbs during congestion, which allows remote attackers to cause a denial of service (system crash) by leveraging lack of skb consumption in conjunction with a double-free error.
- EPSS
- 4.2% chance of exploitation in the next 30 days; higher than 90% of CVEs (scores of 2026-10-31)
- CWE
- CWE-399
- Published
- Modified
- Record from
- the NVD, synced
Affected
- linux:linux_kernel
References
- http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.34
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6ec82562ffc6f297d0de36d65776cff8e5704867
- http://www.openwall.com/lists/oss-security/2013/04/29/10
- https://bugzilla.redhat.com/show_bug.cgi?id=957705
- https://github.com/torvalds/linux/commit/6ec82562ffc6f297d0de36d65776cff8e5704867