SB2013092505 - Cryptographic issues in Linux kernel

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2013092505

SB2013092505 - Cryptographic issues in Linux kernel

Published: September 25, 2013 Updated: August 10, 2020

Security Bulletin ID SB2013092505
Severity
Medium
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Remote access
Highest impact Information disclosure

Breakdown by Severity

Medium 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 security vulnerability.


1) Cryptographic issues (CVE-ID: CVE-2013-4350)

The vulnerability allows a remote non-authenticated attacker to gain access to sensitive information.

The IPv6 SCTP implementation in net/sctp/ipv6.c in the Linux kernel through 3.11.1 uses data structures and function calls that do not trigger an intended configuration of IPsec encryption, which allows remote attackers to obtain sensitive information by sniffing the network.


Remediation

Install update from vendor's website.

References