NVD

Id
32815  
Name
CVE-2014-4943  
Description
The PPPoL2TP feature in net/l2tp/l2tp_ppp.c in the Linux kernel through 3.15.6 allows local users to gain privileges by leveraging data-structure differences between an l2tp socket and an inet socket.  
Reject
 
CVSS Version
2  
CVSS Score
6.9  
Severity
Medium  
CVSS Base Score
6.9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2014-07-19  
Modified Date
2017-01-06  
Seq
2014-4943  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
172380 32815 CVE-2014-4943 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=3cf521f7dc87c031617fd47e4b7aa2593c2f3daf  View
172381 32815 CVE-2014-4943 http://linux.oracle.com/errata/ELSA-2014-0924.html  View
172382 32815 CVE-2014-4943 http://linux.oracle.com/errata/ELSA-2014-3047.html  View
172383 32815 CVE-2014-4943 http://linux.oracle.com/errata/ELSA-2014-3048.html  View
172384 32815 CVE-2014-4943 SUSE-SU-2014:1316  View
172385 32815 CVE-2014-4943 SUSE-SU-2014:1319  View
172386 32815 CVE-2014-4943 SUSE-SU-2015:0481  View
172387 32815 CVE-2014-4943 openSUSE-SU-2015:0566  View
172388 32815 CVE-2014-4943 [oss-security] 20140716 CVE-2014-4943: Linux privilege escalation in ppp over l2tp sockets  View
172389 32815 CVE-2014-4943 RHSA-2014:1025  View
172390 32815 CVE-2014-4943 59790  View
172391 32815 CVE-2014-4943 DSA-2992  View
172392 32815 CVE-2014-4943 36267  View
172393 32815 CVE-2014-4943 1030610  View
172394 32815 CVE-2014-4943 linux-kernel-cve20144943-priv-esc(94665)  View
172395 32815 CVE-2014-4943 https://bugzilla.redhat.com/show_bug.cgi?id=1119458  View
172396 32815 CVE-2014-4943 https://github.com/torvalds/linux/commit/3cf521f7dc87c031617fd47e4b7aa2593c2f3daf  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
14617 JVNDB-2014-003492 Linux Kernel の net/l2tp/l2tp_ppp.c 内の PPPoL2TP 関数における権限を取得される脆弱性 Linux Kernel の net/l2tp/l2tp_ppp.c 内の PPPoL2TP 関数には、権限を取得される脆弱性が存在します。 CVE-2014-4943 72232 CVE-2014-4943 32815 6.9 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-003492.html 2014-07-15 2014-11-27 View