Published: 02/01/2015 Updated: 07/11/2023

CVSS v2 Base Score: 7.8 | Impact Score: 6.9 | Exploitability Score: 10

VMScore: 694

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C

The batadv_frag_merge_packets function in net/batman-adv/fragmentation.c in the B.A.T.M.A.N. implementation in the Linux kernel up to and including 3.18.1 uses an incorrect length field during a calculation of an amount of memory, which allows remote malicious users to cause a denial of service (mesh-node system crash) via fragmented packets.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel

Debian Bug report logs - #774155 linux: CVE-2014-9428: Remote crash of kernel via batman-adv module Package: linux; Maintainer for linux is Debian Kernel Team <debian-kernel@listsdebianorg>; Reported by: conchur@webde Date: Mon, 29 Dec 2014 16:48:01 UTC Severity: important Tags: patch, security, upstream Found in versi ...

USN-2516-1 introduced a regression in the Linux kernel ...

Several security issues were fixed in the kernel ...

USN-2516-1 introduced a regression in the Linux kernel ...

Several security issues were fixed in the kernel ...

USN-2515-1 introduced a regression in the Linux kernel ...

Several security issues were fixed in the kernel ...

The batadv_frag_merge_packets function in net/batman-adv/fragmentationc in the BATMAN implementation in the Linux kernel through 3181 uses an incorrect length field during a calculation of an amount of memory, which allows remote attackers to cause a denial of service (mesh-node system crash) via fragmented packets ...

CWE-399 http://bugs.debian.org/774155 https://lists.open-mesh.org/pipermail/b.a.t.m.a.n/2014-November/012561.html http://www.openwall.com/lists/oss-security/2014/12/31/7 https://github.com/torvalds/linux/commit/5b6698b0e4a37053de35cc24ee695b98a7eb712b http://www.spinics.net/lists/netdev/msg309425.html http://www.ubuntu.com/usn/USN-2518-1 http://www.ubuntu.com/usn/USN-2515-1 http://www.ubuntu.com/usn/USN-2516-1 http://www.ubuntu.com/usn/USN-2517-1 http://www.mandriva.com/security/advisories?name=MDVSA-2015:058 http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147864.html http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147973.html http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=5b6698b0e4a37053de35cc24ee695b98a7eb712b https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=774155 https://nvd.nist.gov https://usn.ubuntu.com/2516-3/https://access.redhat.com/security/cve/cve-2014-9428

CVE-2014-9428

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect