PT-2014-4865 · Linux+4 · Linux Kernel+4

Publicado 2014-03-24 · Atualizado 2023-05-19 · CVE-2014-2672

Positive Technologies (AI Summary)

CVSS v2.0

7.1

Alta

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.13.7

Description A race condition in the ath tx aggr sleep function allows remote attackers to cause a denial of service (system crash) via a large amount of network traffic that triggers certain list deletions.

Recommendations For Linux kernel versions prior to 3.13.7, update to version 3.13.7 or later to resolve the issue.

Exploit

Correção

DoS

Race Condition

Enumeração de Fraquezas

CWE-362

Identificadores relacionados

ALT-PU-2014-1355

ALT-PU-2014-1422

CESA-2014_0981

CESA-2014_1023

CVE-2014-2672

OPENSUSE-SU-2014_0677-1

OPENSUSE-SU-2014_0678-1

RHSA-2014:0557

RHSA-2014:0981

RHSA-2014:1023

RHSA-2014:1101

RHSA-2014_0981

RHSA-2014_1023

USN-2221-1

USN-2223-1

USN-2224-1

USN-2225-1

USN-2227-1

USN-2228-1

Produtos afetados

Alt Linux

Centos

Linux Kernel

Red Hat

Suse

Referências · 26

• 🔥 https://github.com/luan0ap/cve-2018-14634 · Exploit
• 🔥 https://github.com/tempbottle/CVE-2014-0196 · Exploit
• https://github.com/torvalds/linux/commit/21f8aaee0c62708654988ce092838aa7df4d25d8 · Correção
• https://osv.dev/vulnerability/UBUNTU-CVE-2014-2672 · Aviso do Fabricante
• http://kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.13.7 · Aviso do Fabricante
• http://secunia.com/advisories/57468 · Nota
• https://osv.dev/vulnerability/CVE-2014-2672 · Aviso do Fabricante
• https://linux.oracle.com/errata/ELSA-2014-0981.html · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2014-2672 · Aviso do Fabricante
• https://linux.oracle.com/errata/ELSA-2014-1023.html · Aviso do Fabricante
• https://bugzilla.kernel.org/show_bug.cgi?id=70551 · Aviso do Fabricante
• https://kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.12.15 · Aviso do Fabricante
• http://securityfocus.com/bid/66492 · Nota
• https://ubuntu.com/security/notices/USN-2228-1 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2014-2672 · Aviso do Fabricante