PT-2014-4865 · Linux+4 · Linux Kernel+4

Published 2014-03-24 · Updated 2023-05-19 · CVE-2014-2672

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.13.7

Description A race condition in the ath tx aggr sleep function allows remote attackers to cause a denial of service (system crash) via a large amount of network traffic that triggers certain list deletions.

Recommendations For Linux kernel versions prior to 3.13.7, update to version 3.13.7 or later to resolve the issue.

Exploit

Fix

DoS

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

ALT-PU-2014-1355

ALT-PU-2014-1422

CESA-2014_0981

CESA-2014_1023

CVE-2014-2672

OPENSUSE-SU-2014_0677-1

OPENSUSE-SU-2014_0678-1

RHSA-2014:0557

RHSA-2014:0981

RHSA-2014:1023

RHSA-2014:1101

RHSA-2014_0981

RHSA-2014_1023

USN-2221-1

USN-2223-1

USN-2224-1

USN-2225-1

USN-2227-1

USN-2228-1

Affected Products

Alt Linux

Centos

Linux Kernel

Red Hat

Suse

References · 26

• 🔥 https://github.com/luan0ap/cve-2018-14634 · Exploit
• 🔥 https://github.com/tempbottle/CVE-2014-0196 · Exploit
• https://github.com/torvalds/linux/commit/21f8aaee0c62708654988ce092838aa7df4d25d8 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2014-2672 · Vendor Advisory
• http://kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.13.7 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2014-2672 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2014-0981.html · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2014-2672 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2014-1023.html · Vendor Advisory
• https://bugzilla.kernel.org/show_bug.cgi?id=70551 · Vendor Advisory
• https://kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.12.15 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-2228-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2014-2672 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-2223-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-2227-1 · Vendor Advisory