PT-2013-6333 · Opensuse+3 · Xtables-Addons-Kmp-Pae+44

Published 1970-01-01 · Updated 2020-08-27 · CVE-2014-2309

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions openSUSE kernel-default (affected versions not specified) openSUSE kernel-trace-base (affected versions not specified) openSUSE kernel-trace-base-debuginfo (affected versions not specified) openSUSE kernel-trace-devel (affected versions not specified) openSUSE kernel-trace-devel-debuginfo (affected versions not specified) openSUSE kernel-xen (affected versions not specified) openSUSE kernel-xen-base (affected versions not specified) openSUSE kernel-xen-base-debuginfo (affected versions not specified) openSUSE kernel-xen-debuginfo (affected versions not specified) openSUSE kernel-xen-debugsource (affected versions not specified) openSUSE kernel-xen-devel (affected versions not specified) openSUSE kernel-xen-devel-debuginfo (affected versions not specified) openSUSE libipset3 (affected versions not specified) openSUSE libipset3-debuginfo (affected versions not specified) openSUSE ndiswrapper (affected versions not specified) openSUSE ndiswrapper-debuginfo (affected versions not specified) openSUSE ndiswrapper-debugsource (affected versions not specified) openSUSE ndiswrapper-kmp-default (affected versions not specified) openSUSE ndiswrapper-kmp-default-debuginfo (affected versions not specified) openSUSE ndiswrapper-kmp-desktop (affected versions not specified) openSUSE ndiswrapper-kmp-desktop-debuginfo (affected versions not specified) openSUSE ndiswrapper-kmp-pae (affected versions not specified) openSUSE ndiswrapper-kmp-pae-debuginfo (affected versions not specified) openSUSE pcfclock (affected versions not specified) openSUSE pcfclock-debuginfo (affected versions not specified) openSUSE pcfclock-debugsource (affected versions not specified) openSUSE pcfclock-kmp-default (affected versions not specified) openSUSE pcfclock-kmp-default-debuginfo (affected versions not specified) openSUSE pcfclock-kmp-desktop (affected versions not specified) openSUSE pcfclock-kmp-desktop-debuginfo (affected versions not specified) openSUSE pcfclock-kmp-pae (affected versions not specified) openSUSE pcfclock-kmp-pae-debuginfo (affected versions not specified) openSUSE xtables-addons (affected versions not specified) openSUSE xtables-addons-debuginfo (affected versions not specified) openSUSE xtables-addons-debugsource (affected versions not specified) openSUSE xtables-addons-kmp-default (affected versions not specified) openSUSE xtables-addons-kmp-default-debuginfo (affected versions not specified) openSUSE xtables-addons-kmp-desktop (affected versions not specified) openSUSE xtables-addons-kmp-desktop-debuginfo (affected versions not specified) openSUSE xtables-addons-kmp-pae (affected versions not specified) openSUSE xtables-addons-kmp-pae-debuginfo (affected versions not specified) openSUSE xtables-addons-kmp-xen (affected versions not specified) openSUSE xtables-addons-kmp-xen-debuginfo (affected versions not specified)

Description The issue is related to multiple vulnerabilities in various packages of the openSUSE operating system. These vulnerabilities can be exploited remotely, potentially leading to a violation of confidentiality, integrity, and availability of protected information. The ip6 route add function in net/ipv6/route.c of the Linux kernel is specifically mentioned as being vulnerable, allowing remote attackers to cause a denial of service (memory consumption) via a flood of ICMPv6 Router Advertisement packets.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Buffer Overflow

Race Condition

Weakness Enumeration

CWE-119

CWE-362

Related Identifiers

ALT-PU-2014-1355

ALT-PU-2014-1547

ALT-PU-2014-2064

BDU:2015-04307

BDU:2015-04308

BDU:2015-04309

BDU:2015-04310

BDU:2015-05685

BDU:2015-05686

BDU:2015-05687

BDU:2015-05688

BDU:2015-05689

BDU:2015-05690

BDU:2015-05691

BDU:2015-05692

BDU:2015-05693

BDU:2015-05694

BDU:2015-05695

BDU:2015-05696

BDU:2015-05697

BDU:2015-05698

BDU:2015-05699

BDU:2015-05700

BDU:2015-05701

BDU:2015-05702

BDU:2015-05703

BDU:2015-05704

BDU:2015-05705

BDU:2015-05706

BDU:2015-05707

BDU:2015-05708

BDU:2015-05709

BDU:2015-05710

BDU:2015-05711

BDU:2015-05712

BDU:2015-05713

BDU:2015-05714

BDU:2015-05715

BDU:2015-05716

BDU:2015-05717

BDU:2015-05718

BDU:2015-05719

BDU:2015-05720

BDU:2015-05721

BDU:2015-05722

BDU:2015-05723

BDU:2015-05724

BDU:2015-05725

BDU:2015-05726

BDU:2015-05727

BDU:2015-05728

BDU:2015-05729

BDU:2015-05730

BDU:2015-05731

BDU:2015-05732

BDU:2015-05733

BDU:2015-05734

BDU:2015-05735

BDU:2015-05736

BDU:2015-05737

BDU:2015-05738

BDU:2015-05739

BDU:2015-05740

BDU:2015-05741

BDU:2015-05742

BDU:2015-05743

BDU:2015-05744

BDU:2015-05745

BDU:2015-05746

BDU:2015-05747

BDU:2015-05748

BDU:2015-05749

BDU:2015-05750

BDU:2015-05751

BDU:2015-05752

BDU:2015-05753

BDU:2015-05754

BDU:2015-05755

BDU:2015-05756

BDU:2015-05757

BDU:2015-05758

BDU:2015-05759

BDU:2015-05760

BDU:2015-05761

BDU:2015-05762

BDU:2015-05763

BDU:2015-05764

BDU:2015-05765

BDU:2015-05766

BDU:2015-05767

BDU:2015-05768

BDU:2015-05769

BDU:2015-05770

BDU:2015-05771

BDU:2015-05772

BDU:2015-05773

BDU:2015-05774

BDU:2015-05775

BDU:2015-05776

BDU:2015-05777

BDU:2015-05778

BDU:2015-05779

BDU:2015-05780

BDU:2015-05781

BDU:2015-05782

BDU:2015-05783

BDU:2015-05784

BDU:2015-05785

BDU:2015-05786

BDU:2015-05787

BDU:2015-05788

BDU:2015-05789

BDU:2015-05790

BDU:2015-05791

BDU:2015-05792

BDU:2015-05793

BDU:2015-05794

BDU:2015-05795

BDU:2015-05796

BDU:2015-05797

BDU:2015-05798

BDU:2015-05799

BDU:2015-05800

BDU:2015-05801

BDU:2015-05802

BDU:2015-05803

BDU:2015-05804

BDU:2015-05805

BDU:2015-05806

BDU:2015-05807

BDU:2015-05808

BDU:2015-05809

BDU:2015-05810

BDU:2015-05811

BDU:2015-05812

BDU:2015-05813

BDU:2015-05814

BDU:2015-05815

BDU:2015-05816

BDU:2015-05817

BDU:2015-05818

BDU:2015-05819

BDU:2015-05820

BDU:2015-05821

BDU:2015-05822

BDU:2015-05823

BDU:2015-05824

BDU:2015-05825

BDU:2015-05826

BDU:2015-05827

BDU:2015-05828

BDU:2015-05829

BDU:2015-05830

BDU:2015-05831

BDU:2015-05832

BDU:2015-05833

BDU:2015-05834

BDU:2015-05835

BDU:2015-05836

BDU:2015-05837

BDU:2015-05838

BDU:2015-05839

BDU:2015-05840

BDU:2015-05841

BDU:2015-05842

BDU:2015-05843

CVE-2014-2309

OPENSUSE-SU-2014_0957-1

OPENSUSE-SU-2014_0985-1

RHSA-2014:0439

SUSE-RU-2015:0621-1

SUSE-SU-2015:0481-1

SUSE-SU-2015:0581-1

SUSE-SU-2015:0736-1

SUSE-SU-2015:1174-1

SUSE-SU-2015:1376-1

USN-2221-1

USN-2223-1

USN-2224-1

USN-2225-1

USN-2227-1

USN-2228-1

Affected Products

Alt Linux

Linux Kernel

Suse

Kernel-Default

Kernel-Trace-Base

Kernel-Trace-Base-Debuginfo

Kernel-Trace-Devel

Kernel-Trace-Devel-Debuginfo

Kernel-Xen

Kernel-Xen-Base

Kernel-Xen-Base-Debuginfo

Kernel-Xen-Debuginfo

Kernel-Xen-Debugsource

Kernel-Xen-Devel

Kernel-Xen-Devel-Debuginfo

Libipset3

Libipset3-Debuginfo

Ndiswrapper

Ndiswrapper-Debuginfo

Ndiswrapper-Debugsource

Ndiswrapper-Kmp-Default

Ndiswrapper-Kmp-Default-Debuginfo

Ndiswrapper-Kmp-Desktop

Ndiswrapper-Kmp-Desktop-Debuginfo

Ndiswrapper-Kmp-Pae

Ndiswrapper-Kmp-Pae-Debuginfo

Pcfclock

Pcfclock-Debuginfo

Pcfclock-Debugsource

Pcfclock-Kmp-Default

Pcfclock-Kmp-Default-Debuginfo

Pcfclock-Kmp-Desktop

Pcfclock-Kmp-Desktop-Debuginfo

Pcfclock-Kmp-Pae

Pcfclock-Kmp-Pae-Debuginfo

Xtables-Addons

Xtables-Addons-Debuginfo

Xtables-Addons-Debugsource

Xtables-Addons-Kmp-Default

Xtables-Addons-Kmp-Default-Debuginfo

Xtables-Addons-Kmp-Desktop

Xtables-Addons-Kmp-Desktop-Debuginfo

Xtables-Addons-Kmp-Pae

Xtables-Addons-Kmp-Pae-Debuginfo

Xtables-Addons-Kmp-Xen

References · 421

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/android/local/futex_requeue.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/recvmmsg_priv_esc.rb · Exploit
• 🔥 https://github.com/saelo/cve-2014-0038 · Exploit
• 🔥 https://github.com/timwr/CVE-2014-3153 · Exploit
• 🔥 https://github.com/android-rooting-tools/libfutex_exploit · Exploit
• 🔥 https://github.com/lieanu/CVE-2014-3153 · Exploit
• 🔥 https://github.com/elongl/CVE-2014-3153 · Exploit
• 🔥 https://github.com/zerodavinci/CVE-2014-3153-exploit · Exploit
• 🔥 https://github.com/tempbottle/CVE-2014-0196 · Exploit
• 🔥 http://git.kernel.org/cgit/linux/kernel/git/davem/net.git/commit/?id=c88507fbad8055297c1d1e21e599f46960cbee39 · Exploit
• https://bdu.fstec.ru/vul/2015-05721 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2523 · Security Note
• https://bdu.fstec.ru/vul/2015-05743 · Security Note
• https://bdu.fstec.ru/vul/2015-05902 · Security Note
• https://linux.oracle.com/errata/ELSA-2014-3034.html · Vendor Advisory