CVE-2013-2017
The veth (aka virtual Ethernet) driver in the Linux kernel before 2.6.34 does not properly manage...
7.8 HighFix available
The veth (aka virtual Ethernet) driver in the Linux kernel before 2.6.34 does not properly manage skbs during congestion, which allows remote attackers to cause a denial of service (system crash) by leveraging lack of skb consumption in conjunction with a double-free error.
Exploit likelihood
4.19%Up 2.9 points since Feb 4, 2022
What each source reports
NVD Score used
The veth (aka virtual Ethernet) driver in the Linux kernel before 2.6.34 does not properly manage skbs during congestion, which allows remote attackers to cause a denial of service (system crash) by leveraging lack of skb consumption in conjunction with a double-free error.
- Record
CVE-2013-2017- CVSS 2.0
- 7.8 High
AV:N/AC:L/Au:N/C:N/I:N/A:C - Weakness
- CWE-399
- Updated
- 2026-11-02
CVE List No score
The veth (aka virtual Ethernet) driver in the Linux kernel before 2.6.34 does not properly manage skbs during congestion, which allows remote attackers to cause a denial of service (system crash) by leveraging lack of skb consumption in conjunction with a double-free error.
- Record
CVE-2013-2017- Updated
- 2026-11-02
EUVDEUVD-2013-2006 No score
The veth (aka virtual Ethernet) driver in the Linux kernel before 2.6.34 does not properly manage skbs during congestion, which allows remote attackers to cause a denial of service (system crash) by leveraging lack of skb consumption in conjunction with a double-free error.
- Record
EUVD-2013-2006- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-m9r4-3v2g-qcj7 No score
The veth (aka virtual Ethernet) driver in the Linux kernel before 2.6.34 does not properly manage...
The veth (aka virtual Ethernet) driver in the Linux kernel before 2.6.34 does not properly manage skbs during congestion, which allows remote attackers to cause a denial of service (system crash) by leveraging lack of skb consumption in conjunction with a double-free error.
- Record
GHSA-m9r4-3v2g-qcj7- Updated
- 2026-11-02
OSV No score
The veth (aka virtual Ethernet) driver in the Linux kernel before 2.6.34 does not properly manage skbs during congestion, which allows remote attackers to cause a denial of service (system crash) by leveraging lack of skb consumption in conjunction with a double-free error.
- Record
CVE-2013-2017- Updated
- 2026-11-02
OSVDEBIAN-CVE-2013-2017 No score
The veth (aka virtual Ethernet) driver in the Linux kernel before 2.6.34 does not properly manage skbs during congestion, which allows remote attackers to cause a denial of service (system crash) by leveraging lack of skb consumption in conjunction with a double-free error.
- Record
DEBIAN-CVE-2013-2017- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
linuxDebian:12 |
before 2.6.34-1 | 2.6.34-1 |
linuxDebian:13 |
before 2.6.34-1 | 2.6.34-1 |
linuxDebian:14 |
before 2.6.34-1 | 2.6.34-1 |
kernelRed Hat:enterprise_linux:6::client From an advisory covering 4 CVEs |
before 0:2.6.32-358.11.1.el6 | 0:2.6.32-358.11.1.el6 |
kernel-debugRed Hat:enterprise_linux:6::client From an advisory covering 4 CVEs |
before 0:2.6.32-358.11.1.el6 | 0:2.6.32-358.11.1.el6 |
kernel-debug-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 4 CVEs |
before 0:2.6.32-358.11.1.el6 | 0:2.6.32-358.11.1.el6 |
kernel-debug-develRed Hat:enterprise_linux:6::client From an advisory covering 4 CVEs |
before 0:2.6.32-358.11.1.el6 | 0:2.6.32-358.11.1.el6 |
kernel-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 4 CVEs |
before 0:2.6.32-358.11.1.el6 | 0:2.6.32-358.11.1.el6 |
kernel-debuginfo-common-i686Red Hat:enterprise_linux:6::client From an advisory covering 4 CVEs |
before 0:2.6.32-358.11.1.el6 | 0:2.6.32-358.11.1.el6 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:6::client From an advisory covering 4 CVEs |
before 0:2.6.32-358.11.1.el6 | 0:2.6.32-358.11.1.el6 |
Show 58 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kernel-develRed Hat:enterprise_linux:6::client From an advisory covering 4 CVEs |
before 0:2.6.32-358.11.1.el6 | 0:2.6.32-358.11.1.el6 |
kernel-docRed Hat:enterprise_linux:6::client From an advisory covering 4 CVEs |
before 0:2.6.32-358.11.1.el6 | 0:2.6.32-358.11.1.el6 |
kernel-firmwareRed Hat:enterprise_linux:6::client From an advisory covering 4 CVEs |
before 0:2.6.32-358.11.1.el6 | 0:2.6.32-358.11.1.el6 |
kernel-headersRed Hat:enterprise_linux:6::client From an advisory covering 4 CVEs |
before 0:2.6.32-358.11.1.el6 | 0:2.6.32-358.11.1.el6 |
perfRed Hat:enterprise_linux:6::client From an advisory covering 4 CVEs |
before 0:2.6.32-358.11.1.el6 | 0:2.6.32-358.11.1.el6 |
perf-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 4 CVEs |
before 0:2.6.32-358.11.1.el6 | 0:2.6.32-358.11.1.el6 |
python-perf-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 4 CVEs |
before 0:2.6.32-358.11.1.el6 | 0:2.6.32-358.11.1.el6 |
python-perfRed Hat:enterprise_linux:6::client From an advisory covering 4 CVEs |
before 0:2.6.32-358.11.1.el6 | 0:2.6.32-358.11.1.el6 |
kernelRed Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs |
before 0:2.6.32-358.11.1.el6 | 0:2.6.32-358.11.1.el6 |
kernel-debugRed Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs |
before 0:2.6.32-358.11.1.el6 | 0:2.6.32-358.11.1.el6 |
kernel-debug-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs |
before 0:2.6.32-358.11.1.el6 | 0:2.6.32-358.11.1.el6 |
kernel-debug-develRed Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs |
before 0:2.6.32-358.11.1.el6 | 0:2.6.32-358.11.1.el6 |
kernel-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs |
before 0:2.6.32-358.11.1.el6 | 0:2.6.32-358.11.1.el6 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs |
before 0:2.6.32-358.11.1.el6 | 0:2.6.32-358.11.1.el6 |
kernel-develRed Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs |
before 0:2.6.32-358.11.1.el6 | 0:2.6.32-358.11.1.el6 |
kernel-docRed Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs |
before 0:2.6.32-358.11.1.el6 | 0:2.6.32-358.11.1.el6 |
kernel-firmwareRed Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs |
before 0:2.6.32-358.11.1.el6 | 0:2.6.32-358.11.1.el6 |
kernel-headersRed Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs |
before 0:2.6.32-358.11.1.el6 | 0:2.6.32-358.11.1.el6 |
perfRed Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs |
before 0:2.6.32-358.11.1.el6 | 0:2.6.32-358.11.1.el6 |
perf-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs |
before 0:2.6.32-358.11.1.el6 | 0:2.6.32-358.11.1.el6 |
python-perf-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs |
before 0:2.6.32-358.11.1.el6 | 0:2.6.32-358.11.1.el6 |
python-perfRed Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs |
before 0:2.6.32-358.11.1.el6 | 0:2.6.32-358.11.1.el6 |
kernelRed Hat:enterprise_linux:6::server From an advisory covering 4 CVEs |
before 0:2.6.32-358.11.1.el6 | 0:2.6.32-358.11.1.el6 |
kernel-bootwrapperRed Hat:enterprise_linux:6::server From an advisory covering 4 CVEs |
before 0:2.6.32-358.11.1.el6 | 0:2.6.32-358.11.1.el6 |
kernel-debugRed Hat:enterprise_linux:6::server From an advisory covering 4 CVEs |
before 0:2.6.32-358.11.1.el6 | 0:2.6.32-358.11.1.el6 |
kernel-debug-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 4 CVEs |
before 0:2.6.32-358.11.1.el6 | 0:2.6.32-358.11.1.el6 |
kernel-debug-develRed Hat:enterprise_linux:6::server From an advisory covering 4 CVEs |
before 0:2.6.32-358.11.1.el6 | 0:2.6.32-358.11.1.el6 |
kernel-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 4 CVEs |
before 0:2.6.32-358.11.1.el6 | 0:2.6.32-358.11.1.el6 |
kernel-debuginfo-common-i686Red Hat:enterprise_linux:6::server From an advisory covering 4 CVEs |
before 0:2.6.32-358.11.1.el6 | 0:2.6.32-358.11.1.el6 |
kernel-debuginfo-common-ppc64Red Hat:enterprise_linux:6::server From an advisory covering 4 CVEs |
before 0:2.6.32-358.11.1.el6 | 0:2.6.32-358.11.1.el6 |
kernel-debuginfo-common-s390xRed Hat:enterprise_linux:6::server From an advisory covering 4 CVEs |
before 0:2.6.32-358.11.1.el6 | 0:2.6.32-358.11.1.el6 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:6::server From an advisory covering 4 CVEs |
before 0:2.6.32-358.11.1.el6 | 0:2.6.32-358.11.1.el6 |
kernel-develRed Hat:enterprise_linux:6::server From an advisory covering 4 CVEs |
before 0:2.6.32-358.11.1.el6 | 0:2.6.32-358.11.1.el6 |
kernel-docRed Hat:enterprise_linux:6::server From an advisory covering 4 CVEs |
before 0:2.6.32-358.11.1.el6 | 0:2.6.32-358.11.1.el6 |
kernel-firmwareRed Hat:enterprise_linux:6::server From an advisory covering 4 CVEs |
before 0:2.6.32-358.11.1.el6 | 0:2.6.32-358.11.1.el6 |
kernel-headersRed Hat:enterprise_linux:6::server From an advisory covering 4 CVEs |
before 0:2.6.32-358.11.1.el6 | 0:2.6.32-358.11.1.el6 |
kernel-kdumpRed Hat:enterprise_linux:6::server From an advisory covering 4 CVEs |
before 0:2.6.32-358.11.1.el6 | 0:2.6.32-358.11.1.el6 |
kernel-kdump-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 4 CVEs |
before 0:2.6.32-358.11.1.el6 | 0:2.6.32-358.11.1.el6 |
kernel-kdump-develRed Hat:enterprise_linux:6::server From an advisory covering 4 CVEs |
before 0:2.6.32-358.11.1.el6 | 0:2.6.32-358.11.1.el6 |
perfRed Hat:enterprise_linux:6::server From an advisory covering 4 CVEs |
before 0:2.6.32-358.11.1.el6 | 0:2.6.32-358.11.1.el6 |
perf-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 4 CVEs |
before 0:2.6.32-358.11.1.el6 | 0:2.6.32-358.11.1.el6 |
python-perf-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 4 CVEs |
before 0:2.6.32-358.11.1.el6 | 0:2.6.32-358.11.1.el6 |
python-perfRed Hat:enterprise_linux:6::server From an advisory covering 4 CVEs |
before 0:2.6.32-358.11.1.el6 | 0:2.6.32-358.11.1.el6 |
kernelRed Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs |
before 0:2.6.32-358.11.1.el6 | 0:2.6.32-358.11.1.el6 |
kernel-debugRed Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs |
before 0:2.6.32-358.11.1.el6 | 0:2.6.32-358.11.1.el6 |
kernel-debug-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs |
before 0:2.6.32-358.11.1.el6 | 0:2.6.32-358.11.1.el6 |
kernel-debug-develRed Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs |
before 0:2.6.32-358.11.1.el6 | 0:2.6.32-358.11.1.el6 |
kernel-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs |
before 0:2.6.32-358.11.1.el6 | 0:2.6.32-358.11.1.el6 |
kernel-debuginfo-common-i686Red Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs |
before 0:2.6.32-358.11.1.el6 | 0:2.6.32-358.11.1.el6 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs |
before 0:2.6.32-358.11.1.el6 | 0:2.6.32-358.11.1.el6 |
kernel-develRed Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs |
before 0:2.6.32-358.11.1.el6 | 0:2.6.32-358.11.1.el6 |
kernel-docRed Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs |
before 0:2.6.32-358.11.1.el6 | 0:2.6.32-358.11.1.el6 |
kernel-firmwareRed Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs |
before 0:2.6.32-358.11.1.el6 | 0:2.6.32-358.11.1.el6 |
kernel-headersRed Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs |
before 0:2.6.32-358.11.1.el6 | 0:2.6.32-358.11.1.el6 |
perfRed Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs |
before 0:2.6.32-358.11.1.el6 | 0:2.6.32-358.11.1.el6 |
perf-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs |
before 0:2.6.32-358.11.1.el6 | 0:2.6.32-358.11.1.el6 |
python-perf-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs |
before 0:2.6.32-358.11.1.el6 | 0:2.6.32-358.11.1.el6 |
python-perfRed Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs |
before 0:2.6.32-358.11.1.el6 | 0:2.6.32-358.11.1.el6 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-2017 is a high vulnerability (CVSS 7.8) in Linux Kernel, published May 3, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.19%, the 91st percentile. Fixed in linux 2.6.34-1.
References
git.kernel.org?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6ec82562ffc6f297d0de36d65776cff8e5704867
bugzilla.redhat.com/show_bug.cgi?id=957705
ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.34
openwall.com/lists/oss-security/2013/04/29/10
github.com/torvalds/linux/commit/6ec82562ffc6f297d0de36d65776cff8e5704867
support.f5.com/csp/article/K39655464
Show 22 moreShow less
nvd.nist.gov/vuln/detail/CVE-2013-2017
security-tracker.debian.org/tracker/CVE-2013-2017
access.redhat.com/errata/RHSA-2013:0911
security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0911.json
cve.org/CVERecord?id=CVE-2013-1935