NetSight
IP …
medium6.9Public exploit code

CVE-2014-4943

The PPPoL2TP feature in net/l2tp/l2tp_ppp.c in the Linux kernel through 3.15.6 allows local users to gain privileges by leveraging data-structure differences b…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

The PPPoL2TP feature in net/l2tp/l2tp_ppp.c in the Linux kernel through 3.15.6 allows local users to gain privileges by leveraging data-structure differences between an l2tp socket and an inet socket.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 2.6.23 before 3.2.62
from 3.3 before 3.4.102
from 3.5 before 3.10.52
from 3.11 before 3.12.27
from 3.13 before 3.14.16
from 3.15 before 3.15.9
OpensuseOpensuse
Version 11.4
SuseLinux Enterprise Desktop
Version 11
SuseLinux Enterprise Server
Version 11
RedhatEnterprise Linux Server Aus
Version 6.2
DebianDebian Linux
Version 7.0

Weakness classification

CWE-269

References