NetSight
IP …
medium6.9Public exploit code

CVE-2014-2851

Integer overflow in the ping_init_sock function in net/ipv4/ping.c in the Linux kernel through 3.14.1 allows local users to cause a denial of service (use-afte…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Integer overflow in the ping_init_sock function in net/ipv4/ping.c in the Linux kernel through 3.14.1 allows local users to cause a denial of service (use-after-free and system crash) or possibly gain privileges via a crafted application that leverages an improperly managed reference counter.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 3.0 before 3.2.60
from 3.3 before 3.4.92
from 3.5 before 3.10.41
from 3.11 before 3.12.19
from 3.13 before 3.14.5
Version 3.0
DebianDebian Linux
Version 7.0

Weakness classification

CWE-416

References