CVE-2013-4387: Linux Kernel

Medium severity, CVSS 6.1. EPSS: 2.6% chance of exploitation in the next 30 days.

net/ipv6/ip6_output.c in the Linux kernel through 3.11.4 does not properly determine the need for UDP Fragmentation Offload (UFO) processing of small packets after the UFO queueing of a large packet, which allows remote attackers to cause a denial of service (memory corruption and system crash) or possibly have unspecified other impact via network traffic that triggers a large response packet.

Affected products

• Linux Linux Kernel: up to and including 3.11.4; version 3.0 only; version 3.0.1 only; version 3.0.2 only; version 3.0.3 only; version 3.0.4 only; …

Published 2013-10-10. Last modified 2026-06-16.