CVE-2014-3145

2014-05-1121:55:00

CWE-125

[email protected]

web.nvd.nist.gov

cve-2014-3145

bpf_s_anc_nlattr_nest

sk_run_filter function

net/core/filter.c

linux kernel

denial of service

over-read

system crash

crafted bpf instructions

nvd

6 Medium

AI Score

Confidence

High

4.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

0.001 Low

EPSS

Percentile

33.6%

JSON

The BPF_S_ANC_NLATTR_NEST extension implementation in the sk_run_filter function in net/core/filter.c in the Linux kernel through 3.14.3 uses the reverse order in a certain subtraction, which allows local users to cause a denial of service (over-read and system crash) via crafted BPF instructions. NOTE: the affected code was moved to the __skb_get_nlattr_nest function before the vulnerability was announced.

CPENameOperatorVersion
linux:linux_kernellinux linux kernelle3.14.3
oracle:linuxoracle linuxeq6
oracle:linuxoracle linuxeq7
canonical:ubuntu_linuxcanonical ubuntu linuxeq13.10
canonical:ubuntu_linuxcanonical ubuntu linuxeq12.04
canonical:ubuntu_linuxcanonical ubuntu linuxeq10.04
debian:debian_linuxdebian debian linuxeq7.0

CPE	Name	Operator	Version
linux:linux_kernel	linux linux kernel	le	3.14.3
oracle:linux	oracle linux	eq	6
oracle:linux	oracle linux	eq	7
canonical:ubuntu_linux	canonical ubuntu linux	eq	13.10
canonical:ubuntu_linux	canonical ubuntu linux	eq	12.04
canonical:ubuntu_linux	canonical ubuntu linux	eq	10.04
debian:debian_linux	debian debian linux	eq	7.0