NetSight
high7.8

CVE-2014-3535

include/linux/netdevice.h in the Linux kernel before 2.6.36 incorrectly uses macros for netdev_printk and its related logging implementation, which allows remo…

Impact

include/linux/netdevice.h in the Linux kernel before 2.6.36 incorrectly uses macros for netdev_printk and its related logging implementation, which allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) by sending invalid packets to a VxLAN interface.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
through 2.6.35.13
Versions 2.6.35, 2.6.35.1, 2.6.35.2, 2.6.35.3, 2.6.35.4

Weakness classification

References