CVE-2013-4470

CVE-2013-4470 describes a denial-of-service vulnerability in the Linux kernel before version 3.12, specifically impacting systems with UDP Fragmentation Offload (UFO) enabled. A local attacker can exploit this by crafting an application that uses the UDP_CORK option and sends specific packet sizes, leading to memory corruption and a system crash, with a possibility of privilege escalation. The vulnerability has a CVSS score of 6.9 (medium severity), indicating a local attack vector with medium complexity and high impact on confidentiality, integrity, and availability. There is no known active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.