Published: 24/03/2014 Updated: 07/11/2023

CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10

VMScore: 890

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

net/netfilter/nf_conntrack_proto_dccp.c in the Linux kernel up to and including 3.13.6 uses a DCCP header pointer incorrectly, which allows remote malicious users to cause a denial of service (system crash) or possibly execute arbitrary code via a DCCP packet that triggers a call to the (1) dccp_new, (2) dccp_packet, or (3) dccp_error function.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel
canonical ubuntu linux 10.04

The ip6_route_add function in net/ipv6/routec in the Linux kernel through 3136 does not properly count the addition of routes, which allows remote attackers to cause a denial of service (memory consumption) via a flood of ICMPv6 Router Advertisement packets drivers/vhost/netc in the Linux kernel before 31310, when mergeable buffers are disab ...

net/netfilter/nf_conntrack_proto_dccpc in the Linux kernel through 3136 uses a DCCP header pointer incorrectly, which allows remote attackers to cause a denial of service (system crash) or possibly execute arbitrary code via a DCCP packet that triggers a call to the (1) dccp_new, (2) dccp_packet, or (3) dccp_error function ...

Several security issues were fixed in the kernel ...

CWE-20 https://bugzilla.redhat.com/show_bug.cgi?id=1077343 https://github.com/torvalds/linux/commit/b22f5126a24b3b2f15448c3f2a254fc10cbc2b92 http://twitter.com/grsecurity/statuses/445496197399461888 http://www.openwall.com/lists/oss-security/2014/03/17/7 http://secunia.com/advisories/57446 http://www.securityfocus.com/bid/66279 http://www.securitytracker.com/id/1029945 https://exchange.xforce.ibmcloud.com/vulnerabilities/91910 http://www.ubuntu.com/usn/USN-2174-1 http://www.ubuntu.com/usn/USN-2173-1 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b22f5126a24b3b2f15448c3f2a254fc10cbc2b92 https://nvd.nist.gov https://alas.aws.amazon.com/ALAS-2014-328.html https://access.redhat.com/security/cve/cve-2014-2523 https://usn.ubuntu.com/2174-1/

CVE-2014-2523

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect