Back to search
CVE-2014-3145
Published: May 11, 2014
Modified: Aug 6, 2024
PUBLISHED
Description
The BPF_S_ANC_NLATTR_NEST extension implementation in the sk_run_filter function in net/core/filter.c in the Linux kernel through 3.14.3 uses the reverse order in a certain subtraction, which allows local users to cause a denial of service (over-read and system crash) via crafted BPF instructions. NOTE: the affected code was moved to the __skb_get_nlattr_nest function before the vulnerability was announced.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
USN-2263-1
vendor-advisory
x_refsource_UBUNTU
DSA-2949
vendor-advisory
x_refsource_DEBIAN
https://source.android.com/security/bulletin/2017-04-01
x_refsource_CONFIRM
USN-2261-1
vendor-advisory
x_refsource_UBUNTU
USN-2252-1
vendor-advisory
x_refsource_UBUNTU
http://linux.oracle.com/errata/ELSA-2014-3052.html
x_refsource_CONFIRM
58990
third-party-advisory
x_refsource_SECUNIA
60613
third-party-advisory
x_refsource_SECUNIA
USN-2264-1
vendor-advisory
x_refsource_UBUNTU
USN-2262-1
vendor-advisory
x_refsource_UBUNTU
67321
vdb-entry
x_refsource_BID
USN-2259-1
vendor-advisory
x_refsource_UBUNTU
USN-2251-1
vendor-advisory
x_refsource_UBUNTU
59311
third-party-advisory
x_refsource_SECUNIA
59597
third-party-advisory
x_refsource_SECUNIA
1038201
vdb-entry
x_refsource_SECTRACK
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now