Lucene search
F5F5:K16781HistoryJun 26, 2015 - 12:00 a.m.
K16781 : Linux kernel vulnerability CVE-2014-3535
2015-06-2600:00:00
my.f5.com
21
Security Advisory Description
Description
include/linux/netdevice.h in the Linux kernel before 2.6.36 incorrectly uses macros for netdev_printk and its related logging implementation, which allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) by sending invalid packets to a VxLAN interface. (CVE-2014-3535)
Impact
There is no impact; F5 products are not affected by this vulnerability.
Status
F5 Product Development has assigned ID 479429 (BIG-IP), ID 480424 (BIG-IQ), ID 480425 (Enterprise Manager) and ID 461496 (ARX) to this vulnerability.
To determine if your release is known to be vulnerable, the components or features that are affected by the vulnerability, and for information about releases or hotfixes that address the vulnerability, refer to the following table:
| Product | Versions known to be vulnerable | Versions known to be not vulnerable | Severity | Vulnerable component or feature |
|---|---|---|---|---|
| BIG-IP LTM | None | 11.0.0 - 11.6.0 | ||
| 10.0.0 - 10.2.4 | Not Vulnerable | None | ||
| BIG-IP AAM | None | 11.4.0 - 11.6.0 | Not Vulnerable | None |
| BIG-IP AFM | None | 11.3.0 - 11.6.0 | Not Vulnerable | None |
| BIG-IP Analytics | None | |||
| 11.0.0 - 11.6.0 | Not Vulnerable | None | ||
| BIG-IP APM | None | 11.0.0 - 11.6.0 | ||
| 10.1.0 - 10.2.4 | Not Vulnerable | None | ||
| BIG-IP ASM | None | 11.0.0 - 11.6.0 | ||
| 10.0.0 - 10.2.4 | Not Vulnerable | None | ||
| BIG-IP Edge Gateway | ||||
| None | 11.0.0 - 11.3.0 | |||
| 10.1.0 - 10.2.4 | Not Vulnerable | None | ||
| BIG-IP GTM | None | 11.0.0 - 11.6.0 | ||
| 10.0.0 - 10.2.4 | Not Vulnerable | None | ||
| BIG-IP Link Controller | None | 11.0.0 - 11.6.0 | ||
| 10.0.0 - 10.2.4 | Not Vulnerable | None | ||
| BIG-IP PEM | None | |||
| 11.3.0 - 11.6.0 | Not Vulnerable | None | ||
| BIG-IP PSM | None | 11.0.0 - 11.4.1 | ||
| 10.0.0 - 10.2.4 | Not Vulnerable | None | ||
| BIG-IP WebAccelerator | None | 11.0.0 - 11.3.0 | ||
| 10.0.0 - 10.2.4 | Not Vulnerable | None | ||
| BIG-IP WOM | None | 11.0.0 - 11.3.0 | ||
| 10.0.0 - 10.2.4 | Not Vulnerable | None | ||
| ARX | None | 6.0.0 - 6.4.0 | Not Vulnerable | None |
| Enterprise Manager | None | 3.0.0 - 3.1.1 | ||
| 2.1.0 - 2.3.0 | Not Vulnerable | None | ||
| FirePass | None | 7.0.0 | ||
| 6.0.0 - 6.1.0 | Not Vulnerable | None | ||
| BIG-IQ Cloud | None | |||
| 4.0.0 - 4.4.0 | Not Vulnerable | None | ||
| BIG-IQ Device | None | |||
| 4.2.0 - 4.4.0 | Not Vulnerable | None | ||
| BIG-IQ Security | None | |||
| 4.0.0 - 4.4.0 | Not Vulnerable | None | ||
| LineRate | None | 2.4.0 - 2.4.1 | ||
| 2.2.0 - 2.2.5 | ||||
| 1.6.0 - 1.6.4 | ||||
| Not Vulnerable | None |
Recommended Action
None
Supplemental Information
- K9970: Subscribing to email notifications regarding F5 products
- K9957: Creating a custom RSS feed to view new and updated documents
- K4918: Overview of the F5 critical issue hotfix policy
- K167: Downloading software and firmware from F5
- K4602: Overview of the F5 security vulnerability response policy
- K13123: Managing BIG-IP product hotfixes (11.x)
- K10025: Managing BIG-IP product hotfixes (10.x)
- K9502: BIG-IP hotfix matrix
- K10322: FirePass hotfix matrix
- K12766: ARX hotfix matrix
- K3430: Installing FirePass hotfixes
- K6664: Obtaining and installing OPSWAT hotfixes
- K10942: Installing OPSWAT hotfixes on BIG-IP APM systems
Related
prion
prion
Null pointer dereference
2014-09-28 19:55:00
ubuntucve
ubuntucve
CVE-2014-3535
2014-09-28 00:00:00
debiancve
debiancve
CVE-2014-3535
2014-09-28 19:55:05
nvd
nvd
CVE-2014-3535
2014-09-28 19:55:05
f5
f5
SOL16781 - Linux kernel vulnerability CVE-2014-3535
2015-06-26 00:00:00
cvelist
cvelist
CVE-2014-3535
2014-09-28 19:00:00
cve
cve
CVE-2014-3535
2014-09-28 19:55:05
nessus
nessus
Scientific Linux Security Update : kernel on SL6.x i386/x86_64 (20140909)
2014-09-10 00:00:00
CentOS 6 : kernel (CESA-2014:1167)
2014-09-10 00:00:00
RHEL 6 : kernel (RHSA-2014:1167)
2014-09-11 00:00:00
openvas
openvas
RedHat Update for kernel RHSA-2014:1167-01
2014-09-10 00:00:00
CentOS Update for kernel CESA-2014:1167 centos6
2014-09-10 00:00:00
Oracle: Security Advisory (ELSA-2014-1167)
2015-10-06 00:00:00
redhat
redhat
(RHSA-2014:1167) Important: kernel security and bug fix update
2014-09-09 00:00:00
(RHSA-2014:1168) Important: rhev-hypervisor6 security and bug fix update
2014-09-09 00:00:00
centos
centos
kernel, perf, python security update
2014-09-09 23:10:17
oraclelinux
oraclelinux
Unbreakable Enterprise kernel security update
2014-11-03 00:00:00
kernel security and bug fix update
2014-09-09 00:00:00
Unbreakable Enterprise kernel security update
2014-10-17 00:00:00