CVE-2013-0343: Low severity linux kernel vulnerability
Due to the way the Linux kernel handles the creation of IPv6 temporary addresses a malicious LAN user can remotely disable them altogether which may lead to privacy violations and information disclosure.
Reference: -> http://seclists.org/oss-sec/2012/q4/292 -> http://seclists.org/oss-sec/2013/q1/92
Other sources
The ipv6createtempaddr function in net/ipv6/addrconf.c in the Linux kernel through 3.8 does not properly handle problems with the generation of IPv6 temporary addresses, which allows remote attackers to cause a denial of service (excessive retries and address-generation outage), and consequently obtain sensitive information, via ICMPv6 Router Advertisement (RA) messages.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2013-0343?
CVE-2013-0343 has a medium severity rating as it allows a malicious LAN user to disable IPv6 temporary addresses.
How do I fix CVE-2013-0343?
To mitigate CVE-2013-0343, upgrade your Linux kernel to version 5.10.223-1 or later.
What versions of the Linux kernel are affected by CVE-2013-0343?
CVE-2013-0343 affects Linux kernel versions up to 3.8.
Can CVE-2013-0343 lead to data exposure?
Yes, CVE-2013-0343 can lead to privacy violations and information disclosure due to the disabling of IPv6 temporary addresses.
Is CVE-2013-0343 specific to certain distributions of Linux?
CVE-2013-0343 affects the Linux kernel across various distributions, so users of any affected kernel version are at risk.