CVE-2013-7470

cipso_v4_validate in include/net/cipso_ipv4.h in the Linux kernel before 3.11.7, when CONFIG_NETLABEL is disabled, allows attackers to cause a denial of service (infinite loop and crash), as demonstrated by icmpsic, a different vulnerability than CVE-2013-0310.

• CWE-400

• https://cdn.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.11.7Vendor Advisory
• https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f2e5ddcc0d12f9c4c7b254358ad245c9dddce13bPatch, Vendor Advisory
• https://github.com/torvalds/linux/commit/f2e5ddcc0d12f9c4c7b254358ad245c9dddce13bPatch, Third Party Advisory
• https://support.f5.com/csp/article/K21914362
• https://www.arista.com/en/support/advisories-notices/security-advisories/7098-security-advisory-40
• https://cdn.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.11.7Vendor Advisory
• https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f2e5ddcc0d12f9c4c7b254358ad245c9dddce13bPatch, Vendor Advisory
• https://github.com/torvalds/linux/commit/f2e5ddcc0d12f9c4c7b254358ad245c9dddce13bPatch, Third Party Advisory
• https://support.f5.com/csp/article/K21914362
• https://www.arista.com/en/support/advisories-notices/security-advisories/7098-security-advisory-40

Published

Apr 23, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-7464In csrf-magic before 1.0.4, if $GLOBALS['csrf']['secret'] is…
• CVE-2013-7465Ice Cold Apps Servers Ultimate 6.0.2(12) does not require au…
• CVE-2013-7466Simple Machines Forum (SMF) 2.0.4 allows local file inclusio…
• CVE-2013-7467Simple Machines Forum (SMF) 2.0.4 allows XSS via the index.p…
• CVE-2013-7468Simple Machines Forum (SMF) 2.0.4 allows PHP Code Injection …
• CVE-2013-7469Seafile through 6.2.11 always uses the same Initialization V…
• CVE-2013-7471An issue was discovered in soap.cgi?service=WANIPConn1 on D-…9.8
• CVE-2013-7472The "Count per Day" plugin before 3.2.6 for WordPress allows…
• CVE-2013-7473Windu CMS 2.2 allows CSRF via admin/users/?mn=admin.message.…
• CVE-2013-7474Windu CMS 2.2 allows XSS via the name parameter to admin/con…
• CVE-2013-7475The contact-form-plugin plugin before 3.52 for WordPress has…
• CVE-2013-7476The simple-fields plugin before 1.2 for WordPress has CSRF i…