QwikSec

Security Database

CVE

CWE

Training

CVE-2014-0100

Published: Mar 11, 2014

Modified: Aug 6, 2024

PUBLISHED

Description

Race condition in the inet_frag_intern function in net/ipv4/inet_fragment.c in the Linux kernel through 3.13.6 allows remote attackers to cause a denial of service (use-after-free error) or possibly have unspecified other impact via a large series of fragmented ICMP Echo Request packets to a system with a heavy CPU load.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

[oss-security] 20140304 CVE-2014-0100 -- Linux kernel: net: inet frag code race condition leading to user-after-free

mailing-list

x_refsource_MLIST

http://patchwork.ozlabs.org/patch/325844/

x_refsource_MISC

https://bugzilla.redhat.com/show_bug.cgi?id=1070618

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.