NVD

Id
36314  
Name
CVE-2014-9715  
Description
include/net/netfilter/nf_conntrack_extend.h in the netfilter subsystem in the Linux kernel before 3.14.5 uses an insufficiently large data type for certain extension data, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) via outbound network traffic that triggers extension loading, as demonstrated by configuring a PPTP tunnel in a NAT environment.  
Reject
 
CVSS Version
2  
CVSS Score
4.9  
Severity
Medium  
CVSS Base Score
4.9  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-19  
Published
2015-05-27  
Modified Date
2016-12-30  
Seq
2014-9715  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
185741 36314 CVE-2014-9715 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=223b02d923ecd7c84cf9780bb3686f455d279279  View
185742 36314 CVE-2014-9715 [netfilter-devel] 20140526 OOPS NULL pointer dereference in nf_nat_setup_info+0x471 (reproductible, 3.14.4)  View
185743 36314 CVE-2014-9715 RHSA-2015:1534  View
185744 36314 CVE-2014-9715 RHSA-2015:1564  View
185745 36314 CVE-2014-9715 DSA-3237  View
185746 36314 CVE-2014-9715 http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.5  View
185747 36314 CVE-2014-9715 [oss-security] 20150407 CVE request netfilter connection tracking accounting.  View
185748 36314 CVE-2014-9715 http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html  View
185749 36314 CVE-2014-9715 73953  View
185750 36314 CVE-2014-9715 1032415  View
185751 36314 CVE-2014-9715 https://bugzilla.redhat.com/show_bug.cgi?id=1208684  View
185752 36314 CVE-2014-9715 https://github.com/torvalds/linux/commit/223b02d923ecd7c84cf9780bb3686f455d279279  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
19187 JVNDB-2014-008064 Linux Kernel の netfilter サブシステムの include/net/netfilter/nf_conntrack_extend.h におけるサービス運用妨害 (DoS) の脆弱性 Linux Kernel の netfilter サブシステムの include/net/netfilter/nf_conntrack_extend.h は、特定の拡張 (extension) データに不十分な大きさのデータ型を使用するため、サービス運用妨害 (NULL ポインタデリファレンスおよび OOPS) 状態にされる脆弱性が存在します。 CVE-2014-9715 77008 CVE-2014-9715 36314 4.9 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-008064.html 2014-05-31 2015-09-03 View