NetSight
IP …
medium4.9

CVE-2014-3145

The BPF_S_ANC_NLATTR_NEST extension implementation in the sk_run_filter function in net/core/filter.c in the Linux kernel through 3.14.3 uses the reverse order…

Impact

The BPF_S_ANC_NLATTR_NEST extension implementation in the sk_run_filter function in net/core/filter.c in the Linux kernel through 3.14.3 uses the reverse order in a certain subtraction, which allows local users to cause a denial of service (over-read and system crash) via crafted BPF instructions. NOTE: the affected code was moved to the __skb_get_nlattr_nest function before the vulnerability was announced.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
through 3.14.3
OracleLinux
Versions 6, 7
CanonicalUbuntu Linux
Versions 10.04, 12.04, 13.10
DebianDebian Linux
Version 7.0

Weakness classification

CWE-125

References