NVD

Id
31181  
Name
CVE-2014-2851  
Description
Integer overflow in the ping_init_sock function in net/ipv4/ping.c in the Linux kernel through 3.14.1 allows local users to cause a denial of service (use-after-free and system crash) or possibly gain privileges via a crafted application that leverages an improperly managed reference counter.  
Reject
 
CVSS Version
2  
CVSS Score
6.9  
Severity
Medium  
CVSS Base Score
6.9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2014-04-14  
Modified Date
2017-01-06  
Seq
2014-2851  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
163610 31181 CVE-2014-2851 DSA-2926  View
163611 31181 CVE-2014-2851 [oss-security] 20140411 Re: CVE request -- Linux kernel: net: ping: refcount issue in ping_init_sock() function  View
163612 31181 CVE-2014-2851 66779  View
163613 31181 CVE-2014-2851 1030769  View
163614 31181 CVE-2014-2851 https://bugzilla.redhat.com/show_bug.cgi?id=1086730  View
163615 31181 CVE-2014-2851 https://git.kernel.org/cgit/linux/kernel/git/davem/net.git/commit/?id=b04c46190219a4f845e46a459e3102137b7f6cac  View
163616 31181 CVE-2014-2851 [linux-kernel] 20140411 net: ipv4: current group_info should be put after using.  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
13134 JVNDB-2014-002009 Linux Kernel の net/ipv4/ping.c 内の ping_init_sock 関数における整数オーバーフローの脆弱性 Linux Kernel の net/ipv4/ping.c 内の ping_init_sock 関数には、整数オーバーフローの脆弱性が存在します。 CVE-2014-2851 70138 CVE-2014-2851 31181 6.9 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-002009.html 2014-04-14 2014-04-16 View