CVE

Id
70146  
CVE No.
CVE-2014-2851  
Status
Candidate  
Description
Integer overflow in the ping_init_sock function in net/ipv4/ping.c in the Linux kernel through 3.14.1 allows local users to cause a denial of service (use-after-free and system crash) or possibly gain privileges via a crafted application that leverages an improperly managed reference counter.  
Phase
Assigned (20140411)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
668842 70146 CVE-2014-2851 MLIST:[linux-kernel] 20140411 net: ipv4: current group_info should be put after using.  View
668843 70146 CVE-2014-2851 URL:https://lkml.org/lkml/2014/4/10/736  View
668844 70146 CVE-2014-2851 MLIST:[oss-security] 20140411 Re: CVE request -- Linux kernel: net: ping: refcount issue in ping_init_sock() function  View
668845 70146 CVE-2014-2851 URL:http://www.openwall.com/lists/oss-security/2014/04/11/4  View
668846 70146 CVE-2014-2851 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=1086730  View
668847 70146 CVE-2014-2851 CONFIRM:https://git.kernel.org/cgit/linux/kernel/git/davem/net.git/commit/?id=b04c46190219a4f845e46a459e3102137b7f6cac  View
668848 70146 CVE-2014-2851 DEBIAN:DSA-2926  View
668849 70146 CVE-2014-2851 URL:http://www.debian.org/security/2014/dsa-2926  View
668850 70146 CVE-2014-2851 BID:66779  View
668851 70146 CVE-2014-2851 URL:http://www.securityfocus.com/bid/66779  View
668852 70146 CVE-2014-2851 SECTRACK:1030769  View
668853 70146 CVE-2014-2851 URL:http://www.securitytracker.com/id/1030769  View
668854 70146 CVE-2014-2851 SECUNIA:59599  View
668855 70146 CVE-2014-2851 URL:http://secunia.com/advisories/59599  View
668856 70146 CVE-2014-2851 SECUNIA:59386  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
13274 JVNDB-2014-002149 PaperThin CommonSpot におけるアクセス制限を回避される脆弱性 PaperThin CommonSpot には、アクセス制限を回避される脆弱性が存在します。 CVE-2014-2859 70146 7.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-002149.html  View