medium
5
CWE
310
Advisory Published
CVE Published
Updated

CVE-2013-4350

First published: Fri Sep 13 2013(Updated: )

Alan Chester reported an issue with IPv6 on SCTP that IPsec traffic is not being encrypted, whereas on IPv4 it is. Setting up an AH + ESP transport does not seem to have the desired effect: SCTP + IPv4: 22:14:20.809645 IP (tos 0x2,ECT(0), ttl 64, id 0, offset 0, flags [DF], proto AH (51), length 116) 192.168.0.2 &gt; 192.168.0.5: AH(spi=0x00000042,sumlen=16,seq=0x1): ESP(spi=0x00000044,seq=0x1), length 72 22:14:20.813270 IP (tos 0x2,ECT(0), ttl 64, id 0, offset 0, flags [DF], proto AH (51), length 340) 192.168.0.5 &gt; 192.168.0.2: AH(spi=0x00000043,sumlen=16,seq=0x1): SCTP + IPv6: 22:31:19.215029 IP6 (class 0x02, hlim 64, next-header SCTP (132) payload length: 364) fe80::222:15ff:fe87:7fc.3333 &gt; fe80::92e6:baff:fe0d:5a54.36767: sctp 1) [INIT ACK] [init tag: 747759530] [rwnd: 62464] [OS: 10] [MIS: 10] References: <a href="https://bugzilla.kernel.org/show_bug.cgi?id=24412">https://bugzilla.kernel.org/show_bug.cgi?id=24412</a> Upstream fix: <a href="http://git.kernel.org/cgit/linux/kernel/git/davem/net.git/commit/?id=95ee62083cb6453e056562d91f597552021e6ae7">http://git.kernel.org/cgit/linux/kernel/git/davem/net.git/commit/?id=95ee62083cb6453e056562d91f597552021e6ae7</a>

Credit: secalert@redhat.com

Affected SoftwareAffected VersionHow to fix
debian/linux
5.10.223-1
5.10.226-1
6.1.123-1
6.1.128-1
6.12.12-1
6.12.16-1
Linux kernel=3.0-rc1
Linux kernel=3.0-rc2
Linux kernel=3.0-rc3
Linux kernel=3.0-rc4
Linux kernel=3.0-rc5
Linux kernel=3.0-rc6
Linux kernel=3.0-rc7
Linux kernel=3.0.1
Linux kernel=3.0.2
Linux kernel=3.0.3
Linux kernel=3.0.4
Linux kernel=3.0.5
Linux kernel=3.0.6
Linux kernel=3.0.7
Linux kernel=3.0.8
Linux kernel=3.0.9
Linux kernel=3.0.10
Linux kernel=3.0.11
Linux kernel=3.0.12
Linux kernel=3.0.13
Linux kernel=3.0.14
Linux kernel=3.0.15
Linux kernel=3.0.16
Linux kernel=3.0.17
Linux kernel=3.0.18
Linux kernel=3.0.19
Linux kernel=3.0.20
Linux kernel=3.0.21
Linux kernel=3.0.22
Linux kernel=3.0.23
Linux kernel=3.0.24
Linux kernel=3.0.25
Linux kernel=3.0.26
Linux kernel=3.0.27
Linux kernel=3.0.28
Linux kernel=3.0.29
Linux kernel=3.0.30
Linux kernel=3.0.31
Linux kernel=3.0.32
Linux kernel=3.0.33
Linux kernel=3.0.34
Linux kernel=3.0.35
Linux kernel=3.0.36
Linux kernel=3.0.37
Linux kernel=3.0.38
Linux kernel=3.0.39
Linux kernel=3.0.40
Linux kernel=3.0.41
Linux kernel=3.0.42
Linux kernel=3.0.43
Linux kernel=3.0.44
Linux kernel=3.0.45
Linux kernel=3.0.46
Linux kernel=3.0.47
Linux kernel=3.0.48
Linux kernel=3.0.49
Linux kernel=3.0.50
Linux kernel=3.0.51
Linux kernel=3.0.52
Linux kernel=3.0.53
Linux kernel=3.0.54
Linux kernel=3.0.55
Linux kernel=3.0.56
Linux kernel=3.0.57
Linux kernel=3.0.58
Linux kernel=3.0.59
Linux kernel=3.0.60
Linux kernel=3.0.61
Linux kernel=3.0.62
Linux kernel=3.0.63
Linux kernel=3.0.64
Linux kernel=3.0.65
Linux kernel=3.0.66
Linux kernel=3.0.67
Linux kernel=3.0.68
Linux kernel=3.1
Linux kernel=3.1-rc1
Linux kernel=3.1-rc2
Linux kernel=3.1-rc3
Linux kernel=3.1-rc4
Linux kernel=3.1.1
Linux kernel=3.1.2
Linux kernel=3.1.3
Linux kernel=3.1.4
Linux kernel=3.1.5
Linux kernel=3.1.6
Linux kernel=3.1.7
Linux kernel=3.1.8
Linux kernel=3.1.9
Linux kernel=3.1.10
Linux kernel=3.2
Linux kernel=3.2-rc2
Linux kernel=3.2-rc3
Linux kernel=3.2-rc4
Linux kernel=3.2-rc5
Linux kernel=3.2-rc6
Linux kernel=3.2-rc7
Linux kernel=3.2.1
Linux kernel=3.2.2
Linux kernel=3.2.3
Linux kernel=3.2.4
Linux kernel=3.2.5
Linux kernel=3.2.6
Linux kernel=3.2.7
Linux kernel=3.2.8
Linux kernel=3.2.9
Linux kernel=3.2.10
Linux kernel=3.2.11
Linux kernel=3.2.12
Linux kernel=3.2.13
Linux kernel=3.2.14
Linux kernel=3.2.15
Linux kernel=3.2.16
Linux kernel=3.2.17
Linux kernel=3.2.18
Linux kernel=3.2.19
Linux kernel=3.2.20
Linux kernel=3.2.21
Linux kernel=3.2.22
Linux kernel=3.2.23
Linux kernel=3.2.24
Linux kernel=3.2.25
Linux kernel=3.2.26
Linux kernel=3.2.27
Linux kernel=3.2.28
Linux kernel=3.2.29
Linux kernel=3.2.30
Linux kernel=3.3
Linux kernel=3.3-rc1
Linux kernel=3.3-rc2
Linux kernel=3.3-rc3
Linux kernel=3.3-rc4
Linux kernel=3.3-rc5
Linux kernel=3.3-rc6
Linux kernel=3.3-rc7
Linux kernel=3.3.1
Linux kernel=3.3.2
Linux kernel=3.3.3
Linux kernel=3.3.4
Linux kernel=3.3.5
Linux kernel=3.3.6
Linux kernel=3.3.7
Linux kernel=3.3.8
Linux kernel=3.4
Linux kernel=3.4-rc1
Linux kernel=3.4-rc2
Linux kernel=3.4-rc3
Linux kernel=3.4-rc4
Linux kernel=3.4-rc5
Linux kernel=3.4-rc6
Linux kernel=3.4-rc7
Linux kernel=3.4.1
Linux kernel=3.4.2
Linux kernel=3.4.3
Linux kernel=3.4.4
Linux kernel=3.4.5
Linux kernel=3.4.6
Linux kernel=3.4.7
Linux kernel=3.4.8
Linux kernel=3.4.10
Linux kernel=3.4.11
Linux kernel=3.4.12
Linux kernel=3.4.13
Linux kernel=3.4.14
Linux kernel=3.4.15
Linux kernel=3.4.16
Linux kernel=3.4.17
Linux kernel=3.4.18
Linux kernel=3.4.19
Linux kernel=3.4.20
Linux kernel=3.4.21
Linux kernel=3.4.22
Linux kernel=3.4.23
Linux kernel=3.4.24
Linux kernel=3.4.25
Linux kernel=3.4.26
Linux kernel=3.4.27
Linux kernel=3.4.28
Linux kernel=3.4.29
Linux kernel=3.4.30
Linux kernel=3.4.31
Linux kernel=3.4.32
Linux kernel=3.5.1
Linux kernel=3.5.2
Linux kernel=3.5.3
Linux kernel=3.5.4
Linux kernel=3.5.5
Linux kernel=3.5.6
Linux kernel=3.5.7
Linux kernel=3.6
Linux kernel=3.6.1
Linux kernel=3.6.2
Linux kernel=3.6.3
Linux kernel=3.6.4
Linux kernel=3.6.5
Linux kernel=3.6.6
Linux kernel=3.6.7
Linux kernel=3.6.8
Linux kernel=3.6.9
Linux kernel=3.6.10
Linux kernel=3.6.11
Linux kernel=3.7
Linux kernel=3.7.1
Linux kernel=3.7.2
Linux kernel=3.7.3
Linux kernel=3.7.4
Linux kernel=3.7.5
Linux kernel=3.7.6
Linux kernel=3.7.7
Linux kernel=3.7.8
Linux kernel=3.7.9
Linux kernel=3.7.10
Linux kernel=3.8.0
Linux kernel=3.8.1
Linux kernel=3.8.2
Linux kernel=3.8.3
Linux kernel=3.8.4
Linux kernel=3.8.5
Linux kernel=3.8.6
Linux kernel=3.8.7
Linux kernel=3.8.8
Linux kernel=3.8.9
Linux kernel=3.8.10
Linux kernel=3.8.11
Linux kernel=3.8.12
Linux kernel=3.8.13
Linux kernel=3.9-rc1
Linux kernel=3.9-rc2
Linux kernel=3.9-rc3
Linux kernel=3.9-rc4
Linux kernel=3.9-rc5
Linux kernel=3.9-rc6
Linux kernel=3.9-rc7
Linux kernel=3.9.0
Linux kernel=3.9.1
Linux kernel=3.9.2
Linux kernel=3.9.3
Linux kernel=3.9.4
Linux kernel=3.9.10
Linux kernel=3.9.11
Linux kernel=3.10.0
Linux kernel=3.10.1
Linux kernel=3.10.2
Linux kernel=3.10.3
Linux kernel=3.10.4
Linux kernel=3.10.5
Linux kernel=3.10.6
Linux kernel=3.10.7
Linux kernel=3.10.8
Linux kernel=3.10.9
Linux kernel=3.10.10
Linux kernel=3.10.11
Linux kernel=3.10.12
Linux kernel=3.11
Linux kernel=3.11.1
Linux kernel<=3.11.1

Remedy

http://www.openwall.com/lists/oss-security/2013/09/13/3

Remedy

https://github.com/torvalds/linux/commit/95ee62083cb6453e056562d91f597552021e6ae7

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Frequently Asked Questions

  • What is the severity of CVE-2013-4350?

    CVE-2013-4350 is rated as a significant vulnerability due to its impact on IPsec encryption for SCTP over IPv6.

  • How do I fix CVE-2013-4350?

    To fix CVE-2013-4350, update to the recommended Linux kernel versions or later that address this vulnerability.

  • Which software versions are affected by CVE-2013-4350?

    CVE-2013-4350 affects multiple Linux kernel versions starting from 3.0 up to 3.11.1, specifically the early releases.

  • What type of vulnerability is CVE-2013-4350?

    CVE-2013-4350 is a vulnerability related to improper encryption handling in IPsec when using SCTP over IPv6.

  • Can CVE-2013-4350 be exploited remotely?

    Yes, CVE-2013-4350 can potentially be exploited remotely if the affected systems are exposed to an untrusted network.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203