NVD

Id
34602  
Name
CVE-2014-7145  
Description
The SMB2_tcon function in fs/cifs/smb2pdu.c in the Linux kernel before 3.16.3 allows remote CIFS servers to cause a denial of service (NULL pointer dereference and client system crash) or possibly have unspecified other impact by deleting the IPC$ share during resolution of DFS referrals.  
Reject
 
CVSS Version
2  
CVSS Score
7.8  
Severity
High  
CVSS Base Score
7.8  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-19  
Published
2014-09-28  
Modified Date
2016-08-24  
Seq
2014-7145  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
178139 34602 CVE-2014-7145 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=18f39e7be0121317550d03e267e3ebd4dbfbb3ce  View
178140 34602 CVE-2014-7145 RHSA-2015:0102  View
178141 34602 CVE-2014-7145 http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.16.3  View
178142 34602 CVE-2014-7145 [oss-security] 20140922 Re: CVE request: [CIFS] Possible null ptr deref in SMB2_tcon / Linux kernel  View
178143 34602 CVE-2014-7145 69867  View
178144 34602 CVE-2014-7145 USN-2394-1  View
178145 34602 CVE-2014-7145 https://github.com/torvalds/linux/commit/18f39e7be0121317550d03e267e3ebd4dbfbb3ce  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
15572 JVNDB-2014-004447 Linux Kernel の fs/cifs/smb2pdu.c 内の SMB2_tcon 関数におけるサービス運用妨害 (DoS) の脆弱性 Linux Kernel の fs/cifs/smb2pdu.c 内の SMB2_tcon 関数には、サービス運用妨害 (NULL ポインタ参照およびクライアントシステムクラッシュ) 状態にされるなど、不特定の影響を受ける脆弱性が存在します。 CVE-2014-7145 74437 CVE-2014-7145 34602 7.8 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-004447.html 2014-09-17 2015-06-02 View