CVE-2013-2206: Null Pointer Dereference
First published: Thu Jun 20 2013(Updated: )
A flaw was found in the way Linux kernel's SCTP network protocol implementation handled duplicate cookies. A transient empty association is created while processing the duplicate cookie chunk that userspace could query, potentially leading to NULL pointer dereference. A remote attacker able to initiate SCTP connection to the system could use this flaw to create transient conditions that could lead to remote system crash if remote system user is querying SCTP connection info at the time these conditions exist. Upstream fix: <a href="http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f2815633504b442ca0b0605c16bf3d88a3a0fcea">http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f2815633504b442ca0b0605c16bf3d88a3a0fcea</a>
Credit: secalert@redhat.com secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Linux Kernel | <=3.8.4 | |
| Linux Kernel | =3.0-rc1 | |
| Linux Kernel | =3.0-rc2 | |
| Linux Kernel | =3.0-rc3 | |
| Linux Kernel | =3.0-rc4 | |
| Linux Kernel | =3.0-rc5 | |
| Linux Kernel | =3.0-rc6 | |
| Linux Kernel | =3.0-rc7 | |
| Linux Kernel | =3.0.1 | |
| Linux Kernel | =3.0.2 | |
| Linux Kernel | =3.0.3 | |
| Linux Kernel | =3.0.4 | |
| Linux Kernel | =3.0.5 | |
| Linux Kernel | =3.0.6 | |
| Linux Kernel | =3.0.7 | |
| Linux Kernel | =3.0.8 | |
| Linux Kernel | =3.0.9 | |
| Linux Kernel | =3.0.10 | |
| Linux Kernel | =3.0.11 | |
| Linux Kernel | =3.0.12 | |
| Linux Kernel | =3.0.13 | |
| Linux Kernel | =3.0.14 | |
| Linux Kernel | =3.0.15 | |
| Linux Kernel | =3.0.16 | |
| Linux Kernel | =3.0.17 | |
| Linux Kernel | =3.0.18 | |
| Linux Kernel | =3.0.19 | |
| Linux Kernel | =3.0.20 | |
| Linux Kernel | =3.0.21 | |
| Linux Kernel | =3.0.22 | |
| Linux Kernel | =3.0.23 | |
| Linux Kernel | =3.0.24 | |
| Linux Kernel | =3.0.25 | |
| Linux Kernel | =3.0.26 | |
| Linux Kernel | =3.0.27 | |
| Linux Kernel | =3.0.28 | |
| Linux Kernel | =3.0.29 | |
| Linux Kernel | =3.0.30 | |
| Linux Kernel | =3.0.31 | |
| Linux Kernel | =3.0.32 | |
| Linux Kernel | =3.0.33 | |
| Linux Kernel | =3.0.34 | |
| Linux Kernel | =3.0.35 | |
| Linux Kernel | =3.0.36 | |
| Linux Kernel | =3.0.37 | |
| Linux Kernel | =3.0.38 | |
| Linux Kernel | =3.0.39 | |
| Linux Kernel | =3.0.40 | |
| Linux Kernel | =3.0.41 | |
| Linux Kernel | =3.0.42 | |
| Linux Kernel | =3.0.43 | |
| Linux Kernel | =3.0.44 | |
| Linux Kernel | =3.0.45 | |
| Linux Kernel | =3.0.46 | |
| Linux Kernel | =3.0.47 | |
| Linux Kernel | =3.0.48 | |
| Linux Kernel | =3.0.49 | |
| Linux Kernel | =3.0.50 | |
| Linux Kernel | =3.0.51 | |
| Linux Kernel | =3.0.52 | |
| Linux Kernel | =3.0.53 | |
| Linux Kernel | =3.0.54 | |
| Linux Kernel | =3.0.55 | |
| Linux Kernel | =3.0.56 | |
| Linux Kernel | =3.0.57 | |
| Linux Kernel | =3.0.58 | |
| Linux Kernel | =3.0.59 | |
| Linux Kernel | =3.0.60 | |
| Linux Kernel | =3.0.61 | |
| Linux Kernel | =3.0.62 | |
| Linux Kernel | =3.0.63 | |
| Linux Kernel | =3.0.64 | |
| Linux Kernel | =3.0.65 | |
| Linux Kernel | =3.0.66 | |
| Linux Kernel | =3.0.67 | |
| Linux Kernel | =3.0.68 | |
| Linux Kernel | =3.1 | |
| Linux Kernel | =3.1-rc1 | |
| Linux Kernel | =3.1-rc2 | |
| Linux Kernel | =3.1-rc3 | |
| Linux Kernel | =3.1-rc4 | |
| Linux Kernel | =3.1.1 | |
| Linux Kernel | =3.1.2 | |
| Linux Kernel | =3.1.3 | |
| Linux Kernel | =3.1.4 | |
| Linux Kernel | =3.1.5 | |
| Linux Kernel | =3.1.6 | |
| Linux Kernel | =3.1.7 | |
| Linux Kernel | =3.1.8 | |
| Linux Kernel | =3.1.9 | |
| Linux Kernel | =3.1.10 | |
| Linux Kernel | =3.2 | |
| Linux Kernel | =3.2 | |
| Linux Kernel | =3.2-rc2 | |
| Linux Kernel | =3.2-rc3 | |
| Linux Kernel | =3.2-rc4 | |
| Linux Kernel | =3.2-rc5 | |
| Linux Kernel | =3.2-rc6 | |
| Linux Kernel | =3.2-rc7 | |
| Linux Kernel | =3.2.1 | |
| Linux Kernel | =3.2.1 | |
| Linux Kernel | =3.2.2 | |
| Linux Kernel | =3.2.3 | |
| Linux Kernel | =3.2.4 | |
| Linux Kernel | =3.2.5 | |
| Linux Kernel | =3.2.6 | |
| Linux Kernel | =3.2.7 | |
| Linux Kernel | =3.2.8 | |
| Linux Kernel | =3.2.9 | |
| Linux Kernel | =3.2.10 | |
| Linux Kernel | =3.2.11 | |
| Linux Kernel | =3.2.12 | |
| Linux Kernel | =3.2.13 | |
| Linux Kernel | =3.2.14 | |
| Linux Kernel | =3.2.15 | |
| Linux Kernel | =3.2.16 | |
| Linux Kernel | =3.2.17 | |
| Linux Kernel | =3.2.18 | |
| Linux Kernel | =3.2.19 | |
| Linux Kernel | =3.2.20 | |
| Linux Kernel | =3.2.21 | |
| Linux Kernel | =3.2.22 | |
| Linux Kernel | =3.2.23 | |
| Linux Kernel | =3.2.24 | |
| Linux Kernel | =3.2.25 | |
| Linux Kernel | =3.2.26 | |
| Linux Kernel | =3.2.27 | |
| Linux Kernel | =3.2.28 | |
| Linux Kernel | =3.2.29 | |
| Linux Kernel | =3.2.30 | |
| Linux Kernel | =3.3 | |
| Linux Kernel | =3.3-rc1 | |
| Linux Kernel | =3.3-rc2 | |
| Linux Kernel | =3.3-rc3 | |
| Linux Kernel | =3.3-rc4 | |
| Linux Kernel | =3.3-rc5 | |
| Linux Kernel | =3.3-rc6 | |
| Linux Kernel | =3.3-rc7 | |
| Linux Kernel | =3.3.1 | |
| Linux Kernel | =3.3.2 | |
| Linux Kernel | =3.3.3 | |
| Linux Kernel | =3.3.4 | |
| Linux Kernel | =3.3.5 | |
| Linux Kernel | =3.3.6 | |
| Linux Kernel | =3.3.7 | |
| Linux Kernel | =3.3.8 | |
| Linux Kernel | =3.4 | |
| Linux Kernel | =3.4 | |
| Linux Kernel | =3.4-rc1 | |
| Linux Kernel | =3.4-rc1 | |
| Linux Kernel | =3.4-rc2 | |
| Linux Kernel | =3.4-rc2 | |
| Linux Kernel | =3.4-rc3 | |
| Linux Kernel | =3.4-rc3 | |
| Linux Kernel | =3.4-rc4 | |
| Linux Kernel | =3.4-rc4 | |
| Linux Kernel | =3.4-rc5 | |
| Linux Kernel | =3.4-rc5 | |
| Linux Kernel | =3.4-rc6 | |
| Linux Kernel | =3.4-rc6 | |
| Linux Kernel | =3.4-rc7 | |
| Linux Kernel | =3.4-rc7 | |
| Linux Kernel | =3.4.1 | |
| Linux Kernel | =3.4.1 | |
| Linux Kernel | =3.4.2 | |
| Linux Kernel | =3.4.2 | |
| Linux Kernel | =3.4.3 | |
| Linux Kernel | =3.4.3 | |
| Linux Kernel | =3.4.4 | |
| Linux Kernel | =3.4.4 | |
| Linux Kernel | =3.4.5 | |
| Linux Kernel | =3.4.5 | |
| Linux Kernel | =3.4.6 | |
| Linux Kernel | =3.4.7 | |
| Linux Kernel | =3.4.8 | |
| Linux Kernel | =3.4.9 | |
| Linux Kernel | =3.4.10 | |
| Linux Kernel | =3.4.11 | |
| Linux Kernel | =3.4.12 | |
| Linux Kernel | =3.4.13 | |
| Linux Kernel | =3.4.14 | |
| Linux Kernel | =3.4.15 | |
| Linux Kernel | =3.4.16 | |
| Linux Kernel | =3.4.17 | |
| Linux Kernel | =3.4.18 | |
| Linux Kernel | =3.4.19 | |
| Linux Kernel | =3.4.20 | |
| Linux Kernel | =3.4.21 | |
| Linux Kernel | =3.4.22 | |
| Linux Kernel | =3.4.23 | |
| Linux Kernel | =3.4.24 | |
| Linux Kernel | =3.4.25 | |
| Linux Kernel | =3.4.26 | |
| Linux Kernel | =3.4.27 | |
| Linux Kernel | =3.4.28 | |
| Linux Kernel | =3.4.29 | |
| Linux Kernel | =3.4.30 | |
| Linux Kernel | =3.4.31 | |
| Linux Kernel | =3.4.32 | |
| Linux Kernel | =3.5.1 | |
| Linux Kernel | =3.5.2 | |
| Linux Kernel | =3.5.3 | |
| Linux Kernel | =3.5.4 | |
| Linux Kernel | =3.5.5 | |
| Linux Kernel | =3.5.6 | |
| Linux Kernel | =3.5.7 | |
| Linux Kernel | =3.6 | |
| Linux Kernel | =3.6.1 | |
| Linux Kernel | =3.6.2 | |
| Linux Kernel | =3.6.3 | |
| Linux Kernel | =3.6.4 | |
| Linux Kernel | =3.6.5 | |
| Linux Kernel | =3.6.6 | |
| Linux Kernel | =3.6.7 | |
| Linux Kernel | =3.6.8 | |
| Linux Kernel | =3.6.9 | |
| Linux Kernel | =3.6.10 | |
| Linux Kernel | =3.6.11 | |
| Linux Kernel | =3.7 | |
| Linux Kernel | =3.7.1 | |
| Linux Kernel | =3.7.2 | |
| Linux Kernel | =3.7.3 | |
| Linux Kernel | =3.7.4 | |
| Linux Kernel | =3.7.5 | |
| Linux Kernel | =3.7.6 | |
| Linux Kernel | =3.7.7 | |
| Linux Kernel | =3.7.8 | |
| Linux Kernel | =3.7.9 | |
| Linux Kernel | =3.7.10 | |
| Linux Kernel | =3.8.0 | |
| Linux Kernel | =3.8.1 | |
| Linux Kernel | =3.8.2 | |
| Linux Kernel | =3.8.3 | |
| debian/linux | 5.10.223-1 5.10.226-1 6.1.123-1 6.1.119-1 6.12.10-1 6.12.11-1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f2815633504b442ca0b0605c16bf3d88a3a0fcea
- http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00020.html
- http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00021.html
- http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00023.html
- http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00024.html
- http://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html
- http://rhn.redhat.com/errata/RHSA-2013-1166.html
- http://rhn.redhat.com/errata/RHSA-2013-1173.html
- http://www.debian.org/security/2013/dsa-2766
- http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.8.5
- http://www.openwall.com/lists/oss-security/2013/06/21/1
- http://www.ubuntu.com/usn/USN-1939-1
- https://bugzilla.redhat.com/show_bug.cgi?id=976562
- https://github.com/torvalds/linux/commit/f2815633504b442ca0b0605c16bf3d88a3a0fcea
- https://launchpad.net/bugs/cve/CVE-2013-2206
- http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f2815633504b442ca0b0605c16bf3d88a3a0fcea
- https://rhn.redhat.com/errata/RHSA-2013-1166.html
- https://rhn.redhat.com/errata/RHSA-2013-1173.html
- https://rhn.redhat.com/errata/RHSA-2013-1195.html
- https://security-tracker.debian.org/tracker/CVE-2013-2206
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2206
- https://nvd.nist.gov/vuln/detail/CVE-2013-2206
- https://ubuntu.com/security/CVE-2013-2206
- agent/type
- agent/first-publish-date
- collector/launchpad-cve
- source/Launchpad
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2013-2206
- agent/author
- agent/severity
- agent/weakness
- collector/mitre-cve
- source/MITRE
- collector/usn-cve
- source/Ubuntu
- agent/remedy
- agent/references
- agent/description
- agent/event
- agent/last-modified-date
- agent/trending
- agent/source
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-cve
- source/NVD
- agent/software-canonical-lookup
- agent/softwarecombine
- agent/tags
- collector/security-tracker-debian
- source/Debian
- vendor/linux
- canonical/linux kernel
- version/linux kernel/3.8.4
- version/linux kernel/3.0-rc1
- version/linux kernel/3.0-rc2
- version/linux kernel/3.0-rc3
- version/linux kernel/3.0-rc4
- version/linux kernel/3.0-rc5
- version/linux kernel/3.0-rc6
- version/linux kernel/3.0-rc7
- version/linux kernel/3.0.1
- version/linux kernel/3.0.2
- version/linux kernel/3.0.3
- version/linux kernel/3.0.4
- version/linux kernel/3.0.5
- version/linux kernel/3.0.6
- version/linux kernel/3.0.7
- version/linux kernel/3.0.8
- version/linux kernel/3.0.9
- version/linux kernel/3.0.10
- version/linux kernel/3.0.11
- version/linux kernel/3.0.12
- version/linux kernel/3.0.13
- version/linux kernel/3.0.14
- version/linux kernel/3.0.15
- version/linux kernel/3.0.16
- version/linux kernel/3.0.17
- version/linux kernel/3.0.18
- version/linux kernel/3.0.19
- version/linux kernel/3.0.20
- version/linux kernel/3.0.21
- version/linux kernel/3.0.22
- version/linux kernel/3.0.23
- version/linux kernel/3.0.24
- version/linux kernel/3.0.25
- version/linux kernel/3.0.26
- version/linux kernel/3.0.27
- version/linux kernel/3.0.28
- version/linux kernel/3.0.29
- version/linux kernel/3.0.30
- version/linux kernel/3.0.31
- version/linux kernel/3.0.32
- version/linux kernel/3.0.33
- version/linux kernel/3.0.34
- version/linux kernel/3.0.35
- version/linux kernel/3.0.36
- version/linux kernel/3.0.37
- version/linux kernel/3.0.38
- version/linux kernel/3.0.39
- version/linux kernel/3.0.40
- version/linux kernel/3.0.41
- version/linux kernel/3.0.42
- version/linux kernel/3.0.43
- version/linux kernel/3.0.44
- version/linux kernel/3.0.45
- version/linux kernel/3.0.46
- version/linux kernel/3.0.47
- version/linux kernel/3.0.48
- version/linux kernel/3.0.49
- version/linux kernel/3.0.50
- version/linux kernel/3.0.51
- version/linux kernel/3.0.52
- version/linux kernel/3.0.53
- version/linux kernel/3.0.54
- version/linux kernel/3.0.55
- version/linux kernel/3.0.56
- version/linux kernel/3.0.57
- version/linux kernel/3.0.58
- version/linux kernel/3.0.59
- version/linux kernel/3.0.60
- version/linux kernel/3.0.61
- version/linux kernel/3.0.62
- version/linux kernel/3.0.63
- version/linux kernel/3.0.64
- version/linux kernel/3.0.65
- version/linux kernel/3.0.66
- version/linux kernel/3.0.67
- version/linux kernel/3.0.68
- version/linux kernel/3.1
- version/linux kernel/3.1-rc1
- version/linux kernel/3.1-rc2
- version/linux kernel/3.1-rc3
- version/linux kernel/3.1-rc4
- version/linux kernel/3.1.1
- version/linux kernel/3.1.2
- version/linux kernel/3.1.3
- version/linux kernel/3.1.4
- version/linux kernel/3.1.5
- version/linux kernel/3.1.6
- version/linux kernel/3.1.7
- version/linux kernel/3.1.8
- version/linux kernel/3.1.9
- version/linux kernel/3.1.10
- version/linux kernel/3.2
- version/linux kernel/3.2-rc2
- version/linux kernel/3.2-rc3
- version/linux kernel/3.2-rc4
- version/linux kernel/3.2-rc5
- version/linux kernel/3.2-rc6
- version/linux kernel/3.2-rc7
- version/linux kernel/3.2.1
- version/linux kernel/3.2.2
- version/linux kernel/3.2.3
- version/linux kernel/3.2.4
- version/linux kernel/3.2.5
- version/linux kernel/3.2.6
- version/linux kernel/3.2.7
- version/linux kernel/3.2.8
- version/linux kernel/3.2.9
- version/linux kernel/3.2.10
- version/linux kernel/3.2.11
- version/linux kernel/3.2.12
- version/linux kernel/3.2.13
- version/linux kernel/3.2.14
- version/linux kernel/3.2.15
- version/linux kernel/3.2.16
- version/linux kernel/3.2.17
- version/linux kernel/3.2.18
- version/linux kernel/3.2.19
- version/linux kernel/3.2.20
- version/linux kernel/3.2.21
- version/linux kernel/3.2.22
- version/linux kernel/3.2.23
- version/linux kernel/3.2.24
- version/linux kernel/3.2.25
- version/linux kernel/3.2.26
- version/linux kernel/3.2.27
- version/linux kernel/3.2.28
- version/linux kernel/3.2.29
- version/linux kernel/3.2.30
- version/linux kernel/3.3
- version/linux kernel/3.3-rc1
- version/linux kernel/3.3-rc2
- version/linux kernel/3.3-rc3
- version/linux kernel/3.3-rc4
- version/linux kernel/3.3-rc5
- version/linux kernel/3.3-rc6
- version/linux kernel/3.3-rc7
- version/linux kernel/3.3.1
- version/linux kernel/3.3.2
- version/linux kernel/3.3.3
- version/linux kernel/3.3.4
- version/linux kernel/3.3.5
- version/linux kernel/3.3.6
- version/linux kernel/3.3.7
- version/linux kernel/3.3.8
- version/linux kernel/3.4
- version/linux kernel/3.4-rc1
- version/linux kernel/3.4-rc2
- version/linux kernel/3.4-rc3
- version/linux kernel/3.4-rc4
- version/linux kernel/3.4-rc5
- version/linux kernel/3.4-rc6
- version/linux kernel/3.4-rc7
- version/linux kernel/3.4.1
- version/linux kernel/3.4.2
- version/linux kernel/3.4.3
- version/linux kernel/3.4.4
- version/linux kernel/3.4.5
- version/linux kernel/3.4.6
- version/linux kernel/3.4.7
- version/linux kernel/3.4.8
- version/linux kernel/3.4.9
- version/linux kernel/3.4.10
- version/linux kernel/3.4.11
- version/linux kernel/3.4.12
- version/linux kernel/3.4.13
- version/linux kernel/3.4.14
- version/linux kernel/3.4.15
- version/linux kernel/3.4.16
- version/linux kernel/3.4.17
- version/linux kernel/3.4.18
- version/linux kernel/3.4.19
- version/linux kernel/3.4.20
- version/linux kernel/3.4.21
- version/linux kernel/3.4.22
- version/linux kernel/3.4.23
- version/linux kernel/3.4.24
- version/linux kernel/3.4.25
- version/linux kernel/3.4.26
- version/linux kernel/3.4.27
- version/linux kernel/3.4.28
- version/linux kernel/3.4.29
- version/linux kernel/3.4.30
- version/linux kernel/3.4.31
- version/linux kernel/3.4.32
- version/linux kernel/3.5.1
- version/linux kernel/3.5.2
- version/linux kernel/3.5.3
- version/linux kernel/3.5.4
- version/linux kernel/3.5.5
- version/linux kernel/3.5.6
- version/linux kernel/3.5.7
- version/linux kernel/3.6
- version/linux kernel/3.6.1
- version/linux kernel/3.6.2
- version/linux kernel/3.6.3
- version/linux kernel/3.6.4
- version/linux kernel/3.6.5
- version/linux kernel/3.6.6
- version/linux kernel/3.6.7
- version/linux kernel/3.6.8
- version/linux kernel/3.6.9
- version/linux kernel/3.6.10
- version/linux kernel/3.6.11
- version/linux kernel/3.7
- version/linux kernel/3.7.1
- version/linux kernel/3.7.2
- version/linux kernel/3.7.3
- version/linux kernel/3.7.4
- version/linux kernel/3.7.5
- version/linux kernel/3.7.6
- version/linux kernel/3.7.7
- version/linux kernel/3.7.8
- version/linux kernel/3.7.9
- version/linux kernel/3.7.10
- version/linux kernel/3.8.0
- version/linux kernel/3.8.1
- version/linux kernel/3.8.2
- version/linux kernel/3.8.3
- package-manager/debian