PT-2014-9107 · Linux+2 · Linux Kernel+2
Nikolay Aleksandrov
+1
·
Published
1970-01-01
·
Updated
2023-01-19
·
CVE-2014-0100
CVSS v2.0
9.3
High
| Vector | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
openSUSE kernel versions prior to 3.13.6
Description
The issue is related to multiple vulnerabilities in the openSUSE operating system, specifically in various kernel packages. These vulnerabilities can lead to a violation of confidentiality, integrity, and availability of protected information. The exploitation of these vulnerabilities can be carried out remotely. A race condition in the inet frag intern function in net/ipv4/inet fragment.c in the Linux kernel through 3.13.6 allows remote attackers to cause a denial of service (use-after-free error) or possibly have unspecified other impact via a large series of fragmented ICMP Echo Request packets to a system with a heavy CPU load.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
DoS
Use After Free
Race Condition
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Linux Kernel
Suse