NetSight
IP …
critical10.0

CVE-2014-2523

net/netfilter/nf_conntrack_proto_dccp.c in the Linux kernel through 3.13.6 uses a DCCP header pointer incorrectly, which allows remote attackers to cause a den…

Impact

net/netfilter/nf_conntrack_proto_dccp.c in the Linux kernel through 3.13.6 uses a DCCP header pointer incorrectly, which allows remote attackers to cause a denial of service (system crash) or possibly execute arbitrary code via a DCCP packet that triggers a call to the (1) dccp_new, (2) dccp_packet, or (3) dccp_error function.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 3.2.57
from 3.3 before 3.4.86
from 3.5 before 3.10.36
from 3.11 before 3.12.17
from 3.13.0 before 3.13.9
CanonicalUbuntu Linux
Version 10.04

Weakness classification

CWE-20

References