NVD

Id
31086  
Name
CVE-2014-2739  
Description
The cma_req_handler function in drivers/infiniband/core/cma.c in the Linux kernel 3.14.x through 3.14.1 attempts to resolve an RDMA over Converged Ethernet (aka RoCE) address that is properly resolved within a different module, which allows remote attackers to cause a denial of service (incorrect pointer dereference and system crash) via crafted network traffic.  
Reject
 
CVSS Version
2  
CVSS Score
4.6  
Severity
Medium  
CVSS Base Score
4.6  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
3.2  
CVSS Vector
(AV:A/AC:H/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-19  
Published
2014-04-14  
Modified Date
2014-04-24  
Seq
2014-2739  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
163275 31086 CVE-2014-2739 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=b2853fd6c2d0f383dbdf7427e263eb576a633867  View
163276 31086 CVE-2014-2739 [oss-security] 20140410 Re: CVE request Linux kernel: IB/core: crash while resolving passive side RoCE L2 address in cma_req_handler  View
163277 31086 CVE-2014-2739 66716  View
163278 31086 CVE-2014-2739 https://bugzilla.redhat.com/show_bug.cgi?id=1085415  View
163279 31086 CVE-2014-2739 https://github.com/torvalds/linux/commit/b2853fd6c2d0f383dbdf7427e263eb576a633867  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
13133 JVNDB-2014-002008 Linux Kernel の drivers/infiniband/core/cma.c 内の cma_req_handler 関数におけるサービス運用妨害 (DoS) の脆弱性 Linux Kernel の drivers/infiniband/core/cma.c 内の cma_req_handler 関数は、異なるモジュール内で適切に解決されている Converged Ethernet (別名 RoCE) アドレス上の RDMA を解決することを試みるため、サービス運用妨害 (不正なポインタデリファレンスおよびシステムクラッシュ) 状態にされる脆弱性が存在します。 CVE-2014-2739 70026 CVE-2014-2739 31086 4.6 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-002008.html 2014-04-02 2014-04-16 View