CVE-2013-2206: Null Pointer Dereference

Q: What is the severity of CVE-2013-2206?

The severity of CVE-2013-2206 is considered high due to its potential to lead to a NULL pointer dereference by remote attackers.

Q: How do I fix CVE-2013-2206?

To fix CVE-2013-2206, upgrade to a Linux kernel version 5.10.223-1 or higher, or 6.1.119-1 or higher.

Q: Which versions of the Linux kernel are affected by CVE-2013-2206?

CVE-2013-2206 affects the Linux kernel versions prior to 3.8.4, including multiple release candidates.

Q: What type of vulnerability is CVE-2013-2206?

CVE-2013-2206 is a vulnerability related to the SCTP network protocol implementation in the Linux kernel.

Q: Can CVE-2013-2206 be exploited remotely?

Yes, CVE-2013-2206 can be exploited remotely by attackers who can send specific crafted packets to a vulnerable system.

Published Jun 20, 2013

Updated

A flaw was found in the way Linux kernel's SCTP network protocol implementation handled duplicate cookies. A transient empty association is created while processing the duplicate cookie chunk that userspace could query, potentially leading to NULL pointer dereference. A remote attacker able to initiate SCTP connection to the system could use this flaw to create transient conditions that could lead to remote system crash if remote system user is querying SCTP connection info at the time these conditions exist.

Upstream fix: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f2815633504b442ca0b0605c16bf3d88a3a0fcea

Other sources

The sctpsfdo524dupcook function in net/sctp/smstatefuns.c in the SCTP implementation in the Linux kernel before 3.8.5 does not properly handle associations during the processing of a duplicate COOKIE ECHO chunk, which allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via crafted SCTP traffic.

— Launchpad

Affected Software

234 affected componentsFixes available

Linux Linux kernel<=3.8.4

Linux Linux kernel=3.0-rc1

Linux Linux kernel=3.0-rc2

Linux Linux kernel=3.0-rc3

Linux Linux kernel=3.0-rc4

Linux Linux kernel=3.0-rc5

Linux Linux kernel=3.0-rc6

Linux Linux kernel=3.0-rc7

Linux Linux kernel=3.0.1

Linux Linux kernel=3.0.2

Linux Linux kernel=3.0.3

Linux Linux kernel=3.0.4

Linux Linux kernel=3.0.5

Linux Linux kernel=3.0.6

Linux Linux kernel=3.0.7

Linux Linux kernel=3.0.8

Linux Linux kernel=3.0.9

Linux Linux kernel=3.0.10

Linux Linux kernel=3.0.11

Linux Linux kernel=3.0.12

Linux Linux kernel=3.0.13

Linux Linux kernel=3.0.14

Linux Linux kernel=3.0.15

Linux Linux kernel=3.0.16

Linux Linux kernel=3.0.17

Linux Linux kernel=3.0.18

Linux Linux kernel=3.0.19

Linux Linux kernel=3.0.20

Linux Linux kernel=3.0.21

Linux Linux kernel=3.0.22

Linux Linux kernel=3.0.23

Linux Linux kernel=3.0.24

Linux Linux kernel=3.0.25

Linux Linux kernel=3.0.26

Linux Linux kernel=3.0.27

Linux Linux kernel=3.0.28

Linux Linux kernel=3.0.29

Linux Linux kernel=3.0.30

Linux Linux kernel=3.0.31

Linux Linux kernel=3.0.32

Linux Linux kernel=3.0.33

Linux Linux kernel=3.0.34

Linux Linux kernel=3.0.35

Linux Linux kernel=3.0.36

Linux Linux kernel=3.0.37

Linux Linux kernel=3.0.38

Linux Linux kernel=3.0.39

Linux Linux kernel=3.0.40

Linux Linux kernel=3.0.41

Linux Linux kernel=3.0.42

Linux Linux kernel=3.0.43

Linux Linux kernel=3.0.44

Linux Linux kernel=3.0.45

Linux Linux kernel=3.0.46

Linux Linux kernel=3.0.47

Linux Linux kernel=3.0.48

Linux Linux kernel=3.0.49

Linux Linux kernel=3.0.50

Linux Linux kernel=3.0.51

Linux Linux kernel=3.0.52

Linux Linux kernel=3.0.53

Linux Linux kernel=3.0.54

Linux Linux kernel=3.0.55

Linux Linux kernel=3.0.56

Linux Linux kernel=3.0.57

Linux Linux kernel=3.0.58

Linux Linux kernel=3.0.59

Linux Linux kernel=3.0.60

Linux Linux kernel=3.0.61

Linux Linux kernel=3.0.62

Linux Linux kernel=3.0.63

Linux Linux kernel=3.0.64

Linux Linux kernel=3.0.65

Linux Linux kernel=3.0.66

Linux Linux kernel=3.0.67

Linux Linux kernel=3.0.68

Linux Linux kernel=3.1

Linux Linux kernel=3.1-rc1

Linux Linux kernel=3.1-rc2

Linux Linux kernel=3.1-rc3

Linux Linux kernel=3.1-rc4

Linux Linux kernel=3.1.1

Linux Linux kernel=3.1.2

Linux Linux kernel=3.1.3

Linux Linux kernel=3.1.4

Linux Linux kernel=3.1.5

Linux Linux kernel=3.1.6

Linux Linux kernel=3.1.7

Linux Linux kernel=3.1.8

Linux Linux kernel=3.1.9

Linux Linux kernel=3.1.10

Linux Linux kernel=3.2

Linux Linux kernel=3.2-rc2

Linux Linux kernel=3.2-rc3

Linux Linux kernel=3.2-rc4

Linux Linux kernel=3.2-rc5

Linux Linux kernel=3.2-rc6

Linux Linux kernel=3.2-rc7

Linux Linux kernel=3.2.1

Linux Linux kernel=3.2.2

Linux Linux kernel=3.2.3

Linux Linux kernel=3.2.4

Linux Linux kernel=3.2.5

Linux Linux kernel=3.2.6

Linux Linux kernel=3.2.7

Linux Linux kernel=3.2.8

Linux Linux kernel=3.2.9

Linux Linux kernel=3.2.10

Linux Linux kernel=3.2.11

Linux Linux kernel=3.2.12

Linux Linux kernel=3.2.13

Linux Linux kernel=3.2.14

Linux Linux kernel=3.2.15

Linux Linux kernel=3.2.16

Linux Linux kernel=3.2.17

Linux Linux kernel=3.2.18

Linux Linux kernel=3.2.19

Linux Linux kernel=3.2.20

Linux Linux kernel=3.2.21

Linux Linux kernel=3.2.22

Linux Linux kernel=3.2.23

Linux Linux kernel=3.2.24

Linux Linux kernel=3.2.25

Linux Linux kernel=3.2.26

Linux Linux kernel=3.2.27

Linux Linux kernel=3.2.28

Linux Linux kernel=3.2.29

Linux Linux kernel=3.2.30

Linux Linux kernel=3.3

Linux Linux kernel=3.3-rc1

Linux Linux kernel=3.3-rc2

Linux Linux kernel=3.3-rc3

Linux Linux kernel=3.3-rc4

Linux Linux kernel=3.3-rc5

Linux Linux kernel=3.3-rc6

Linux Linux kernel=3.3-rc7

Linux Linux kernel=3.3.1

Linux Linux kernel=3.3.2

Linux Linux kernel=3.3.3

Linux Linux kernel=3.3.4

Linux Linux kernel=3.3.5

Linux Linux kernel=3.3.6

Linux Linux kernel=3.3.7

Linux Linux kernel=3.3.8

Linux Linux kernel=3.4

Linux Linux kernel=3.4-rc1

Linux Linux kernel=3.4-rc2

Linux Linux kernel=3.4-rc3

Linux Linux kernel=3.4-rc4

Linux Linux kernel=3.4-rc5

Linux Linux kernel=3.4-rc6

Linux Linux kernel=3.4-rc7

Linux Linux kernel=3.4.1

Linux Linux kernel=3.4.2

Linux Linux kernel=3.4.3

Linux Linux kernel=3.4.4

Linux Linux kernel=3.4.5

Linux Linux kernel=3.4.6

Linux Linux kernel=3.4.7

Linux Linux kernel=3.4.8

Linux Linux kernel=3.4.9

Linux Linux kernel=3.4.10

Linux Linux kernel=3.4.11

Linux Linux kernel=3.4.12

Linux Linux kernel=3.4.13

Linux Linux kernel=3.4.14

Linux Linux kernel=3.4.15

Linux Linux kernel=3.4.16

Linux Linux kernel=3.4.17

Linux Linux kernel=3.4.18

Linux Linux kernel=3.4.19

Linux Linux kernel=3.4.20

Linux Linux kernel=3.4.21

Linux Linux kernel=3.4.22

Linux Linux kernel=3.4.23

Linux Linux kernel=3.4.24

Linux Linux kernel=3.4.25

Linux Linux kernel=3.4.26

Linux Linux kernel=3.4.27

Linux Linux kernel=3.4.28

Linux Linux kernel=3.4.29

Linux Linux kernel=3.4.30

Linux Linux kernel=3.4.31

Linux Linux kernel=3.4.32

Linux Linux kernel=3.5.1

Linux Linux kernel=3.5.2

Linux Linux kernel=3.5.3

Linux Linux kernel=3.5.4

Linux Linux kernel=3.5.5

Linux Linux kernel=3.5.6

Linux Linux kernel=3.5.7

Linux Linux kernel=3.6

Linux Linux kernel=3.6.1

Linux Linux kernel=3.6.2

Linux Linux kernel=3.6.3

Linux Linux kernel=3.6.4

Linux Linux kernel=3.6.5

Linux Linux kernel=3.6.6

Linux Linux kernel=3.6.7

Linux Linux kernel=3.6.8

Linux Linux kernel=3.6.9

Linux Linux kernel=3.6.10

Linux Linux kernel=3.6.11

Linux Linux kernel=3.7

Linux Linux kernel=3.7.1

Linux Linux kernel=3.7.2

Linux Linux kernel=3.7.3

Linux Linux kernel=3.7.4

Linux Linux kernel=3.7.5

Linux Linux kernel=3.7.6

Linux Linux kernel=3.7.7

Linux Linux kernel=3.7.8

Linux Linux kernel=3.7.9

Linux Linux kernel=3.7.10

Linux Linux kernel=3.8.0

Linux Linux kernel=3.8.1

Linux Linux kernel=3.8.2

Linux Linux kernel=3.8.3

debian/linux

5.10.223-15.10.234-16.1.129-16.1.135-16.12.22-16.12.25-1

Remediation

Patch Available

https://github.com/torvalds/linux/commit/f2815633504b442ca0b0605c16bf3d88a3a0fcea

Event History

Jun 20, 2013

Data Sourced

via Red Hat·07:35 PM

DescriptionSeverityAffected Software

Jul 4, 2013

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

Description

Jan 11, 2024

Data Sourced

via Launchpad·10:01 PM

Description

Sep 16, 2024

Data Sourced

via Ubuntu·12:52 AM

RemedyDescriptionSeverityAffected Software

Apr 24, 2025

Data Sourced

via Debian·02:00 AM

DescriptionAffected Software

Frequently Asked Questions

What is the severity of CVE-2013-2206?

The severity of CVE-2013-2206 is considered high due to its potential to lead to a NULL pointer dereference by remote attackers.

How do I fix CVE-2013-2206?

To fix CVE-2013-2206, upgrade to a Linux kernel version 5.10.223-1 or higher, or 6.1.119-1 or higher.

Which versions of the Linux kernel are affected by CVE-2013-2206?

CVE-2013-2206 affects the Linux kernel versions prior to 3.8.4, including multiple release candidates.

What type of vulnerability is CVE-2013-2206?

CVE-2013-2206 is a vulnerability related to the SCTP network protocol implementation in the Linux kernel.

Can CVE-2013-2206 be exploited remotely?

Yes, CVE-2013-2206 can be exploited remotely by attackers who can send specific crafted packets to a vulnerable system.

CVE-2013-2206: Null Pointer Dereference

Other sources

Affected Software

Remediation

Patch Available

Event History

Frequently Asked Questions

What is the severity of CVE-2013-2206?

How do I fix CVE-2013-2206?

Which versions of the Linux kernel are affected by CVE-2013-2206?

What type of vulnerability is CVE-2013-2206?

Can CVE-2013-2206 be exploited remotely?

Company

Resources

Contact