NVD

Id
31392  
Name
CVE-2014-3145  
Description
The BPF_S_ANC_NLATTR_NEST extension implementation in the sk_run_filter function in net/core/filter.c in the Linux kernel through 3.14.3 uses the reverse order in a certain subtraction, which allows local users to cause a denial of service (over-read and system crash) via crafted BPF instructions. NOTE: the affected code was moved to the __skb_get_nlattr_nest function before the vulnerability was announced.  
Reject
 
CVSS Version
2  
CVSS Score
4.9  
Severity
Medium  
CVSS Base Score
4.9  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:N/A:C)  
Pub Date
2017-07-18  
Published
2014-05-11  
Modified Date
2017-07-10  
Seq
2014-3145  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
164345 31392 CVE-2014-3145 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=05ab8f2647e4221cbdb3856dd7d32bd5407316b3  View
164346 31392 CVE-2014-3145 http://linux.oracle.com/errata/ELSA-2014-3052.html  View
164347 31392 CVE-2014-3145 59311  View
164348 31392 CVE-2014-3145 60613  View
164349 31392 CVE-2014-3145 [oss-security] 20140509 Re: CVE request Linux kernel: filter: prevent nla extensions to peek beyond the end of the message  View
164350 31392 CVE-2014-3145 67321  View
164351 31392 CVE-2014-3145 https://github.com/torvalds/linux/commit/05ab8f2647e4221cbdb3856dd7d32bd5407316b3  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
13581 JVNDB-2014-002456 Linux Kernel の net/core/filter.c の sk_run_filter 関数におけるサービス運用妨害 (DoS) の脆弱性 Linux Kernel の net/core/filter.c 内の sk_run_filter 関数の BPF_S_ANC_NLATTR_NEST 拡張機能の実装は、特定の減算において逆の順序を使用するため、サービス運用妨害 (オーバーリードおよびシステムクラッシュ) 状態にされる脆弱性が存在します。 CVE-2014-3145 70432 CVE-2014-3145 31392 4.9 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-002456.html 2014-04-14 2014-05-13 View