Launchpad.net

CVE 2013-0343

The ipv6_create_tempaddr function in net/ipv6/addrconf.c in the Linux kernel through 3.8 does not properly handle problems with the generation of IPv6 temporary addresses, which allows remote attackers to cause a denial of service (excessive retries and address-generation outage), and consequently obtain sensitive information, via ICMPv6 Router Advertisement (RA) messages.

Related bugs and status

CVE-2013-0343 (Candidate) is related to these bugs:

Bug #1143800: CVE-2013-0343

		In	Importance	Status
1143800	CVE-2013-0343	linux (Ubuntu)	Medium	Invalid
1143800	CVE-2013-0343	linux-fsl-imx51 (Ubuntu)	Medium	Invalid
1143800	CVE-2013-0343	linux-mvl-dove (Ubuntu)	Medium	Invalid
1143800	CVE-2013-0343	linux-lts-backport-maverick (Ubuntu)	Medium	Invalid
1143800	CVE-2013-0343	linux-lts-backport-natty (Ubuntu)	Undecided	Invalid
1143800	CVE-2013-0343	linux-ti-omap4 (Ubuntu)	Medium	Invalid
1143800	CVE-2013-0343	linux-ec2 (Ubuntu)	Medium	Invalid
1143800	CVE-2013-0343	linux-lts-backport-maverick (Ubuntu Raring)	Medium	Invalid
1143800	CVE-2013-0343	linux-lts-backport-natty (Ubuntu Raring)	Undecided	Invalid
1143800	CVE-2013-0343	linux-lts-backport-maverick (Ubuntu Quantal)	Medium	Invalid
1143800	CVE-2013-0343	linux-lts-backport-natty (Ubuntu Quantal)	Undecided	Invalid
1143800	CVE-2013-0343	linux (Ubuntu Precise)	Medium	Fix Released
1143800	CVE-2013-0343	linux-ec2 (Ubuntu Precise)	Medium	Invalid
1143800	CVE-2013-0343	linux-fsl-imx51 (Ubuntu Precise)	Medium	Invalid
1143800	CVE-2013-0343	linux-lts-backport-maverick (Ubuntu Precise)	Medium	Invalid
1143800	CVE-2013-0343	linux-lts-backport-natty (Ubuntu Precise)	Undecided	Invalid
1143800	CVE-2013-0343	linux-mvl-dove (Ubuntu Precise)	Medium	Invalid
1143800	CVE-2013-0343	linux-ti-omap4 (Ubuntu Precise)	Medium	Fix Released
1143800	CVE-2013-0343	linux-lts-backport-maverick (Ubuntu Lucid)	Medium	Invalid
1143800	CVE-2013-0343	linux-lts-backport-natty (Ubuntu Lucid)	Undecided	Won't Fix
1143800	CVE-2013-0343	linux-armadaxp (Ubuntu)	Medium	Invalid
1143800	CVE-2013-0343	linux-armadaxp (Ubuntu Precise)	Medium	Fix Released
1143800	CVE-2013-0343	linux-lts-backport-oneiric (Ubuntu)	Medium	Invalid
1143800	CVE-2013-0343	linux-lts-backport-oneiric (Ubuntu Lucid)	Medium	Invalid
1143800	CVE-2013-0343	linux-lts-backport-oneiric (Ubuntu Precise)	Medium	Invalid
1143800	CVE-2013-0343	linux-lts-backport-oneiric (Ubuntu Quantal)	Medium	Invalid
1143800	CVE-2013-0343	linux-lts-backport-oneiric (Ubuntu Raring)	Medium	Invalid
1143800	CVE-2013-0343	linux-lts-quantal (Ubuntu)	Medium	Invalid
1143800	CVE-2013-0343	linux-lts-quantal (Ubuntu Precise)	Medium	Fix Released
1143800	CVE-2013-0343	linux-lts-backport-maverick (Ubuntu Saucy)	Medium	Invalid
1143800	CVE-2013-0343	linux-lts-backport-natty (Ubuntu Saucy)	Undecided	Invalid
1143800	CVE-2013-0343	linux-lts-backport-oneiric (Ubuntu Saucy)	Medium	Invalid
1143800	CVE-2013-0343	linux-lts-raring (Ubuntu)	Medium	Invalid
1143800	CVE-2013-0343	linux-lts-raring (Ubuntu Precise)	Medium	Fix Released
1143800	CVE-2013-0343	linux (Ubuntu Trusty)	Medium	Invalid
1143800	CVE-2013-0343	linux-armadaxp (Ubuntu Trusty)	Medium	Invalid
1143800	CVE-2013-0343	linux-ec2 (Ubuntu Trusty)	Medium	Invalid
1143800	CVE-2013-0343	linux-fsl-imx51 (Ubuntu Trusty)	Medium	Invalid
1143800	CVE-2013-0343	linux-lts-backport-maverick (Ubuntu Trusty)	Medium	Invalid
1143800	CVE-2013-0343	linux-lts-backport-natty (Ubuntu Trusty)	Undecided	Invalid
1143800	CVE-2013-0343	linux-lts-backport-oneiric (Ubuntu Trusty)	Medium	Invalid
1143800	CVE-2013-0343	linux-lts-quantal (Ubuntu Trusty)	Medium	Invalid
1143800	CVE-2013-0343	linux-lts-raring (Ubuntu Trusty)	Medium	Invalid
1143800	CVE-2013-0343	linux-mvl-dove (Ubuntu Trusty)	Medium	Invalid
1143800	CVE-2013-0343	linux-ti-omap4 (Ubuntu Trusty)	Medium	Invalid
1143800	CVE-2013-0343	linux-lts-saucy (Ubuntu)	Medium	Invalid
1143800	CVE-2013-0343	linux-lts-saucy (Ubuntu Precise)	Medium	Invalid
1143800	CVE-2013-0343	linux-lts-saucy (Ubuntu Trusty)	Medium	Invalid
1143800	CVE-2013-0343	linux-lts-trusty (Ubuntu)	Medium	Invalid
1143800	CVE-2013-0343	linux-lts-trusty (Ubuntu Precise)	Medium	Invalid

Bug #1220185: CVE-2013-2888

		In	Importance	Status
1220185	CVE-2013-2888	linux (Ubuntu)	Medium	Invalid
1220185	CVE-2013-2888	linux-fsl-imx51 (Ubuntu)	Medium	Invalid
1220185	CVE-2013-2888	linux-mvl-dove (Ubuntu)	Medium	Invalid
1220185	CVE-2013-2888	linux-lts-backport-maverick (Ubuntu)	Undecided	Won't Fix
1220185	CVE-2013-2888	linux-lts-backport-natty (Ubuntu)	Undecided	Won't Fix
1220185	CVE-2013-2888	linux-ti-omap4 (Ubuntu)	Medium	Invalid
1220185	CVE-2013-2888	linux-ec2 (Ubuntu)	Medium	Invalid
1220185	CVE-2013-2888	linux-lts-backport-maverick (Ubuntu Saucy)	Undecided	Won't Fix
1220185	CVE-2013-2888	linux-lts-backport-natty (Ubuntu Saucy)	Undecided	Won't Fix
1220185	CVE-2013-2888	linux-lts-backport-maverick (Ubuntu Raring)	Undecided	Won't Fix
1220185	CVE-2013-2888	linux-lts-backport-natty (Ubuntu Raring)	Undecided	Won't Fix
1220185	CVE-2013-2888	linux-lts-backport-maverick (Ubuntu Quantal)	Undecided	Won't Fix
1220185	CVE-2013-2888	linux-lts-backport-natty (Ubuntu Quantal)	Undecided	Won't Fix
1220185	CVE-2013-2888	linux (Ubuntu Precise)	Medium	Fix Released
1220185	CVE-2013-2888	linux-ec2 (Ubuntu Precise)	Medium	Invalid
1220185	CVE-2013-2888	linux-fsl-imx51 (Ubuntu Precise)	Medium	Invalid
1220185	CVE-2013-2888	linux-lts-backport-maverick (Ubuntu Precise)	Undecided	Won't Fix
1220185	CVE-2013-2888	linux-lts-backport-natty (Ubuntu Precise)	Undecided	Won't Fix
1220185	CVE-2013-2888	linux-mvl-dove (Ubuntu Precise)	Medium	Invalid
1220185	CVE-2013-2888	linux-ti-omap4 (Ubuntu Precise)	Medium	Fix Released
1220185	CVE-2013-2888	linux-lts-backport-maverick (Ubuntu Lucid)	Undecided	Won't Fix
1220185	CVE-2013-2888	linux-lts-backport-natty (Ubuntu Lucid)	Undecided	Won't Fix
1220185	CVE-2013-2888	linux-armadaxp (Ubuntu)	Medium	Invalid
1220185	CVE-2013-2888	linux-armadaxp (Ubuntu Precise)	Medium	Fix Released
1220185	CVE-2013-2888	linux-lts-quantal (Ubuntu)	Medium	Invalid
1220185	CVE-2013-2888	linux-lts-quantal (Ubuntu Precise)	Medium	Fix Released
1220185	CVE-2013-2888	linux-lts-raring (Ubuntu)	Medium	Invalid
1220185	CVE-2013-2888	linux-lts-raring (Ubuntu Precise)	Medium	Fix Released
1220185	CVE-2013-2888	linux (Ubuntu Trusty)	Medium	Invalid
1220185	CVE-2013-2888	linux-armadaxp (Ubuntu Trusty)	Medium	Invalid
1220185	CVE-2013-2888	linux-ec2 (Ubuntu Trusty)	Medium	Invalid
1220185	CVE-2013-2888	linux-fsl-imx51 (Ubuntu Trusty)	Medium	Invalid
1220185	CVE-2013-2888	linux-lts-backport-maverick (Ubuntu Trusty)	Undecided	Won't Fix
1220185	CVE-2013-2888	linux-lts-backport-natty (Ubuntu Trusty)	Undecided	Won't Fix
1220185	CVE-2013-2888	linux-lts-quantal (Ubuntu Trusty)	Medium	Invalid
1220185	CVE-2013-2888	linux-lts-raring (Ubuntu Trusty)	Medium	Invalid
1220185	CVE-2013-2888	linux-mvl-dove (Ubuntu Trusty)	Medium	Invalid
1220185	CVE-2013-2888	linux-ti-omap4 (Ubuntu Trusty)	Medium	Invalid
1220185	CVE-2013-2888	linux-lts-saucy (Ubuntu)	Medium	Invalid
1220185	CVE-2013-2888	linux-lts-saucy (Ubuntu Precise)	Medium	Invalid
1220185	CVE-2013-2888	linux-lts-saucy (Ubuntu Trusty)	Medium	Invalid
1220185	CVE-2013-2888	linux-lts-trusty (Ubuntu)	Medium	Invalid
1220185	CVE-2013-2888	linux-lts-trusty (Ubuntu Precise)	Medium	Invalid
1220185	CVE-2013-2888	linux-lts-trusty (Ubuntu Trusty)	Medium	Invalid
1220185	CVE-2013-2888	linux-lts-backport-maverick (Ubuntu Utopic)	Undecided	Invalid
1220185	CVE-2013-2888	linux-lts-backport-natty (Ubuntu Utopic)	Undecided	Invalid
1220185	CVE-2013-2888	linux (Ubuntu Vivid)	Medium	Invalid
1220185	CVE-2013-2888	linux-armadaxp (Ubuntu Vivid)	Medium	Invalid
1220185	CVE-2013-2888	linux-ec2 (Ubuntu Vivid)	Medium	Invalid
1220185	CVE-2013-2888	linux-fsl-imx51 (Ubuntu Vivid)	Medium	Invalid

Bug #1220196: CVE-2013-2892

		In	Importance	Status
1220196	CVE-2013-2892	linux (Ubuntu)	Low	Invalid
1220196	CVE-2013-2892	linux-fsl-imx51 (Ubuntu)	Low	Invalid
1220196	CVE-2013-2892	linux-mvl-dove (Ubuntu)	Low	Invalid
1220196	CVE-2013-2892	linux-lts-backport-maverick (Ubuntu)	Undecided	Won't Fix
1220196	CVE-2013-2892	linux-lts-backport-natty (Ubuntu)	Undecided	Won't Fix
1220196	CVE-2013-2892	linux-ti-omap4 (Ubuntu)	Low	Invalid
1220196	CVE-2013-2892	linux-ec2 (Ubuntu)	Low	Invalid
1220196	CVE-2013-2892	linux-lts-backport-maverick (Ubuntu Saucy)	Undecided	Won't Fix
1220196	CVE-2013-2892	linux-lts-backport-natty (Ubuntu Saucy)	Undecided	Won't Fix
1220196	CVE-2013-2892	linux-lts-backport-maverick (Ubuntu Raring)	Undecided	Won't Fix
1220196	CVE-2013-2892	linux-lts-backport-natty (Ubuntu Raring)	Undecided	Won't Fix
1220196	CVE-2013-2892	linux-lts-backport-maverick (Ubuntu Quantal)	Undecided	Won't Fix
1220196	CVE-2013-2892	linux-lts-backport-natty (Ubuntu Quantal)	Undecided	Won't Fix
1220196	CVE-2013-2892	linux (Ubuntu Precise)	Low	Fix Released
1220196	CVE-2013-2892	linux-ec2 (Ubuntu Precise)	Low	Invalid
1220196	CVE-2013-2892	linux-fsl-imx51 (Ubuntu Precise)	Low	Invalid
1220196	CVE-2013-2892	linux-lts-backport-maverick (Ubuntu Precise)	Undecided	Won't Fix
1220196	CVE-2013-2892	linux-lts-backport-natty (Ubuntu Precise)	Undecided	Won't Fix
1220196	CVE-2013-2892	linux-mvl-dove (Ubuntu Precise)	Low	Invalid
1220196	CVE-2013-2892	linux-ti-omap4 (Ubuntu Precise)	Low	Fix Released
1220196	CVE-2013-2892	linux-lts-backport-maverick (Ubuntu Lucid)	Undecided	Won't Fix
1220196	CVE-2013-2892	linux-lts-backport-natty (Ubuntu Lucid)	Undecided	Won't Fix
1220196	CVE-2013-2892	linux-armadaxp (Ubuntu)	Low	Invalid
1220196	CVE-2013-2892	linux-armadaxp (Ubuntu Precise)	Low	Fix Released
1220196	CVE-2013-2892	linux-lts-quantal (Ubuntu)	Low	Invalid
1220196	CVE-2013-2892	linux-lts-quantal (Ubuntu Precise)	Low	Fix Released
1220196	CVE-2013-2892	linux-lts-raring (Ubuntu)	Low	Invalid
1220196	CVE-2013-2892	linux-lts-raring (Ubuntu Precise)	Low	Fix Released
1220196	CVE-2013-2892	linux (Ubuntu Trusty)	Low	Invalid
1220196	CVE-2013-2892	linux-armadaxp (Ubuntu Trusty)	Low	Invalid
1220196	CVE-2013-2892	linux-ec2 (Ubuntu Trusty)	Low	Invalid
1220196	CVE-2013-2892	linux-fsl-imx51 (Ubuntu Trusty)	Low	Invalid
1220196	CVE-2013-2892	linux-lts-backport-maverick (Ubuntu Trusty)	Undecided	Won't Fix
1220196	CVE-2013-2892	linux-lts-backport-natty (Ubuntu Trusty)	Undecided	Won't Fix
1220196	CVE-2013-2892	linux-lts-quantal (Ubuntu Trusty)	Low	Invalid
1220196	CVE-2013-2892	linux-lts-raring (Ubuntu Trusty)	Low	Invalid
1220196	CVE-2013-2892	linux-mvl-dove (Ubuntu Trusty)	Low	Invalid
1220196	CVE-2013-2892	linux-ti-omap4 (Ubuntu Trusty)	Low	Invalid
1220196	CVE-2013-2892	linux-lts-saucy (Ubuntu)	Low	Invalid
1220196	CVE-2013-2892	linux-lts-saucy (Ubuntu Precise)	Low	Invalid
1220196	CVE-2013-2892	linux-lts-saucy (Ubuntu Trusty)	Low	Invalid
1220196	CVE-2013-2892	linux-lts-trusty (Ubuntu)	Low	Invalid
1220196	CVE-2013-2892	linux-lts-trusty (Ubuntu Precise)	Low	Invalid
1220196	CVE-2013-2892	linux-lts-trusty (Ubuntu Trusty)	Low	Invalid
1220196	CVE-2013-2892	linux-lts-backport-maverick (Ubuntu Utopic)	Undecided	Invalid
1220196	CVE-2013-2892	linux-lts-backport-natty (Ubuntu Utopic)	Undecided	Invalid
1220196	CVE-2013-2892	linux (Ubuntu Vivid)	Low	Invalid
1220196	CVE-2013-2892	linux-armadaxp (Ubuntu Vivid)	Low	Invalid
1220196	CVE-2013-2892	linux-ec2 (Ubuntu Vivid)	Low	Invalid
1220196	CVE-2013-2892	linux-fsl-imx51 (Ubuntu Vivid)	Low	Invalid

Bug #1223984: linux: 2.6.32-52.114 -proposed tracker

		In	Importance	Status
1223984	linux: 2.6.32-52.114 -proposed tracker	linux (Ubuntu)	Undecided	Invalid
1223984	linux: 2.6.32-52.114 -proposed tracker	linux (Ubuntu Lucid)	Medium	Fix Released
1223984	linux: 2.6.32-52.114 -proposed tracker	Kernel SRU Workflow	Medium	Fix Released
1223984	linux: 2.6.32-52.114 -proposed tracker	Kernel SRU Workflow certification-testing	Medium	Fix Released
1223984	linux: 2.6.32-52.114 -proposed tracker	Kernel SRU Workflow prepare-package	Medium	Fix Released
1223984	linux: 2.6.32-52.114 -proposed tracker	Kernel SRU Workflow prepare-package-lbm	Medium	Fix Released
1223984	linux: 2.6.32-52.114 -proposed tracker	Kernel SRU Workflow prepare-package-meta	Medium	Fix Released
1223984	linux: 2.6.32-52.114 -proposed tracker	Kernel SRU Workflow prepare-package-ports-meta	Medium	Fix Released
1223984	linux: 2.6.32-52.114 -proposed tracker	Kernel SRU Workflow promote-to-proposed	Medium	Fix Released
1223984	linux: 2.6.32-52.114 -proposed tracker	Kernel SRU Workflow promote-to-security	Medium	Fix Released
1223984	linux: 2.6.32-52.114 -proposed tracker	Kernel SRU Workflow promote-to-updates	Medium	Fix Released
1223984	linux: 2.6.32-52.114 -proposed tracker	Kernel SRU Workflow regression-testing	Medium	Fix Released
1223984	linux: 2.6.32-52.114 -proposed tracker	Kernel SRU Workflow security-signoff	Medium	Fix Released
1223984	linux: 2.6.32-52.114 -proposed tracker	Kernel SRU Workflow verification-testing	Medium	Fix Released

Bug #1224214: linux-ec2: 2.6.32-357.70 -proposed tracker

		In	Importance	Status
1224214	linux-ec2: 2.6.32-357.70 -proposed tracker	linux-ec2 (Ubuntu)	Medium	Invalid
1224214	linux-ec2: 2.6.32-357.70 -proposed tracker	linux-ec2 (Ubuntu Lucid)	Medium	Fix Released
1224214	linux-ec2: 2.6.32-357.70 -proposed tracker	Kernel SRU Workflow	Medium	Fix Released
1224214	linux-ec2: 2.6.32-357.70 -proposed tracker	Kernel SRU Workflow certification-testing	Medium	Invalid
1224214	linux-ec2: 2.6.32-357.70 -proposed tracker	Kernel SRU Workflow prepare-package	Medium	Fix Released
1224214	linux-ec2: 2.6.32-357.70 -proposed tracker	Kernel SRU Workflow prepare-package-meta	Medium	Fix Released
1224214	linux-ec2: 2.6.32-357.70 -proposed tracker	Kernel SRU Workflow promote-to-proposed	Medium	Fix Released
1224214	linux-ec2: 2.6.32-357.70 -proposed tracker	Kernel SRU Workflow promote-to-security	Medium	Fix Released
1224214	linux-ec2: 2.6.32-357.70 -proposed tracker	Kernel SRU Workflow promote-to-updates	Medium	Fix Released
1224214	linux-ec2: 2.6.32-357.70 -proposed tracker	Kernel SRU Workflow regression-testing	Medium	Fix Released
1224214	linux-ec2: 2.6.32-357.70 -proposed tracker	Kernel SRU Workflow security-signoff	Medium	Fix Released
1224214	linux-ec2: 2.6.32-357.70 -proposed tracker	Kernel SRU Workflow upload-to-ppa	Medium	Fix Released
1224214	linux-ec2: 2.6.32-357.70 -proposed tracker	Kernel SRU Workflow verification-testing	Medium	Fix Released

See the

CVE page on Mitre.org for more details.

Launchpad.net

CVE 2013-0343

Related bugs and status

Related bugs

References