NVD

Id
36131  
Name
CVE-2014-9428  
Description
The batadv_frag_merge_packets function in net/batman-adv/fragmentation.c in the B.A.T.M.A.N. implementation in the Linux kernel through 3.18.1 uses an incorrect length field during a calculation of an amount of memory, which allows remote attackers to cause a denial of service (mesh-node system crash) via fragmented packets.  
Reject
 
CVSS Version
2  
CVSS Score
7.8  
Severity
High  
CVSS Base Score
7.8  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-19  
Published
2015-01-02  
Modified Date
2015-04-17  
Seq
2014-9428  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
184692 36131 CVE-2014-9428 http://bugs.debian.org/774155  View
184693 36131 CVE-2014-9428 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=5b6698b0e4a37053de35cc24ee695b98a7eb712b  View
184694 36131 CVE-2014-9428 FEDORA-2015-0517  View
184695 36131 CVE-2014-9428 FEDORA-2015-0515  View
184696 36131 CVE-2014-9428 MDVSA-2015:058  View
184697 36131 CVE-2014-9428 [oss-security] 20141231 Re: CVE Request: Linux: Remote crash via batman-adv module - Linux kernel  View
184698 36131 CVE-2014-9428 [netdev] 20141220 Stable fixes for batman-adv  View
184699 36131 CVE-2014-9428 USN-2515-1  View
184700 36131 CVE-2014-9428 USN-2516-1  View
184701 36131 CVE-2014-9428 USN-2517-1  View
184702 36131 CVE-2014-9428 USN-2518-1  View
184703 36131 CVE-2014-9428 https://github.com/torvalds/linux/commit/5b6698b0e4a37053de35cc24ee695b98a7eb712b  View
184704 36131 CVE-2014-9428 [b.a.t.m.a.n] 20141118 kernel BUG at net/core/skbuff.c:100  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
18616 JVNDB-2014-007491 Linux Kernel の B.A.T.M.A.N. の実装におけるサービス運用妨害 (DoS) の脆弱性 Linux Kernel の B.A.T.M.A.N. の実装の net/batman-adv/fragmentation.c 内の batadv_frag_merge_packets 関数は、メモリ量の計算中に誤った length フィールドを使用するため、サービス運用妨害 (メッシュノードのシステムクラッシュ) 状態にされる脆弱性が存在します。 CVE-2014-9428 76721 CVE-2014-9428 36131 7.8 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007491.html 2014-12-24 2015-01-08 View