NVD

Id
29035  
Name
CVE-2014-0100  
Description
Race condition in the inet_frag_intern function in net/ipv4/inet_fragment.c in the Linux kernel through 3.13.6 allows remote attackers to cause a denial of service (use-after-free error) or possibly have unspecified other impact via a large series of fragmented ICMP Echo Request packets to a system with a heavy CPU load.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2014-03-11  
Modified Date
2014-03-11  
Seq
2014-0100  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
153310 29035 CVE-2014-0100 http://patchwork.ozlabs.org/patch/325844/  View
153311 29035 CVE-2014-0100 [oss-security] 20140304 CVE-2014-0100 -- Linux kernel: net: inet frag code race condition leading to user-after-free  View
153312 29035 CVE-2014-0100 https://bugzilla.redhat.com/show_bug.cgi?id=1070618  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
12732 JVNDB-2014-001607 Linux Kernel の net/ipv4/inet_fragment.c 内の inet_frag_intern 関数におけるサービス運用妨害 (DoS) の脆弱性 Linux Kernel の net/ipv4/inet_fragment.c 内の inet_frag_intern 関数には、競合状態により、サービス運用妨害 (解放済みメモリ使用のエラー) 状態にされるなど、不特定の影響を受ける脆弱性が存在します。 CVE-2014-0100 67501 CVE-2014-0100 29035 9.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-001607.html 2014-03-03 2014-03-12 View