CVE-2013-4163

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.10.3

Description The issue is related to the IPv6 implementation in the Linux kernel, where the ip6 append data mtu function does not properly maintain information about the IPV6 MTU setsockopt option. This allows local users to cause a denial of service, resulting in a system crash, by using a crafted application that utilizes the UDP CORK option in a setsockopt system call.

Recommendations For Linux kernel versions prior to 3.10.3, update to version 3.10.3 or later to resolve the issue.