CVE-2014-3144

2014-05-1121:55:00

CWE-190

[email protected]

web.nvd.nist.gov

cve-2014-3144

linux kernel

integer underflow

denial of service

nvd

security vulnerability

5.3 Medium

AI Score

Confidence

High

4.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

0.001 Low

EPSS

Percentile

33.6%

JSON

The (1) BPF_S_ANC_NLATTR and (2) BPF_S_ANC_NLATTR_NEST extension implementations in the sk_run_filter function in net/core/filter.c in the Linux kernel through 3.14.3 do not check whether a certain length value is sufficiently large, which allows local users to cause a denial of service (integer underflow and system crash) via crafted BPF instructions. NOTE: the affected code was moved to the __skb_get_nlattr and __skb_get_nlattr_nest functions before the vulnerability was announced.

CPENameOperatorVersion
linux:linux_kernellinux linux kernelle3.14.3
debian:debian_linuxdebian debian linuxeq7.0
canonical:ubuntu_linuxcanonical ubuntu linuxeq13.10
canonical:ubuntu_linuxcanonical ubuntu linuxeq12.04
canonical:ubuntu_linuxcanonical ubuntu linuxeq10.04
oracle:linuxoracle linuxeq6
oracle:linuxoracle linuxeq7

CPE	Name	Operator	Version
linux:linux_kernel	linux linux kernel	le	3.14.3
debian:debian_linux	debian debian linux	eq	7.0
canonical:ubuntu_linux	canonical ubuntu linux	eq	13.10
canonical:ubuntu_linux	canonical ubuntu linux	eq	12.04
canonical:ubuntu_linux	canonical ubuntu linux	eq	10.04
oracle:linux	oracle linux	eq	6
oracle:linux	oracle linux	eq	7