Lucene search

K
nvd[email protected]NVD:CVE-2014-7145
HistorySep 28, 2014 - 10:55 a.m.

CVE-2014-7145

2014-09-2810:55:10
CWE-399
web.nvd.nist.gov

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

7.1 High

AI Score

Confidence

High

0.008 Low

EPSS

Percentile

81.3%

The SMB2_tcon function in fs/cifs/smb2pdu.c in the Linux kernel before 3.16.3 allows remote CIFS servers to cause a denial of service (NULL pointer dereference and client system crash) or possibly have unspecified other impact by deleting the IPC$ share during resolution of DFS referrals.

Affected configurations

NVD
Node
redhatenterprise_linux_desktopMatch7.0
OR
redhatenterprise_linux_hpc_nodeMatch7.0
OR
redhatenterprise_linux_serverMatch7.0
OR
redhatenterprise_linux_workstationMatch7.0
Node
linuxlinux_kernelRange3.63.10.55
OR
linuxlinux_kernelRange3.113.12.29
OR
linuxlinux_kernelRange3.133.14.19
OR
linuxlinux_kernelRange3.153.16.3
Node
canonicalubuntu_linuxMatch12.04lts

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

7.1 High

AI Score

Confidence

High

0.008 Low

EPSS

Percentile

81.3%