CVE

Id
67540  
CVE No.
CVE-2014-0131  
Status
Candidate  
Description
Use-after-free vulnerability in the skb_segment function in net/core/skbuff.c in the Linux kernel through 3.13.6 allows attackers to obtain sensitive information from kernel memory by leveraging the absence of a certain orphaning operation.  
Phase
Assigned (20131203)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
651500 67540 CVE-2014-0131 MLIST:[netdev] 20140310 [PATCH 0/5] skbuff: fix skb_segment with zero copy skbs  View
651501 67540 CVE-2014-0131 URL:http://www.spinics.net/lists/netdev/msg274250.html  View
651502 67540 CVE-2014-0131 MLIST:[netdev] 20140310 [PATCH 5/5] skbuff: skb_segment: orphan frags before copying  View
651503 67540 CVE-2014-0131 URL:http://www.spinics.net/lists/netdev/msg274316.html  View
651504 67540 CVE-2014-0131 MLIST:[oss-security] 20140310 CVE-2014-0131 -- kernel: net: use-after-free during segmentation with zerocopy  View
651505 67540 CVE-2014-0131 URL:http://www.openwall.com/lists/oss-security/2014/03/10/4  View
651506 67540 CVE-2014-0131 CONFIRM:http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=1fd819ecb90cc9b822cd84d3056ddba315d3340f  View
651507 67540 CVE-2014-0131 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=1074589  View
651508 67540 CVE-2014-0131 CONFIRM:https://github.com/torvalds/linux/commit/1fd819ecb90cc9b822cd84d3056ddba315d3340f  View
651509 67540 CVE-2014-0131 SUSE:SUSE-SU-2015:0481  View
651510 67540 CVE-2014-0131 URL:http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html  View
651511 67540 CVE-2014-0131 SUSE:openSUSE-SU-2015:0566  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
13267 JVNDB-2014-002142 cURL および libcurl における任意の SSL サーバになりすまされる脆弱性 cURL および libcurl は、OpenSSL、axTLS、QSOSSL または TLS の GSKit ライブラリを使用する場合、X.509 証明書のサブジェクトの Common Name (CN) フィールド内のワイルドカードの IP アドレスを認識するため、任意の SSL サーバになりすまされる脆弱性が存在します。 CVE-2014-0139 67540 5.8 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-002142.html  View