Vulnerability CVE-2014-3144: Information

Description

The (1) BPF_S_ANC_NLATTR and (2) BPF_S_ANC_NLATTR_NEST extension implementations in the sk_run_filter function in net/core/filter.c in the Linux kernel through 3.14.3 do not check whether a certain length value is sufficiently large, which allows local users to cause a denial of service (integer underflow and system crash) via crafted BPF instructions. NOTE: the affected code was moved to the __skb_get_nlattr and __skb_get_nlattr_nest functions before the vulnerability was announced.

Severity: MEDIUM (4.9)

URL: https://nvd.nist.gov/vuln/detail/CVE-2014-3144
Published: May 12, 2014
Modified: Nov. 7, 2023
Error type identifier: CWE-190

Fixed packages

Package name
Branch
Fixed in version
Version from repository
Errata ID
Task #
State
kernel-image-std-defsisyphus3.14.17-alt16.1.94-alt1ALT-PU-2014-2064-1128797Fixed
kernel-image-std-defp103.14.17-alt15.10.218-alt1ALT-PU-2014-2064-1128797Fixed
kernel-image-std-defp93.14.17-alt15.4.277-alt1ALT-PU-2014-2064-1128797Fixed
kernel-image-std-defc9f23.14.17-alt15.10.214-alt0.c9f.2ALT-PU-2014-2064-1128797Fixed
kernel-image-std-defc73.14.18-alt14.4.277-alt0.M70C.1ALT-PU-2014-2116-1129349Fixed
kernel-image-std-defp113.14.17-alt16.1.91-alt1ALT-PU-2014-2064-1128797Fixed
kernel-image-un-defsisyphus3.14.4-alt16.6.34-alt1ALT-PU-2014-1634-1119753Fixed
kernel-image-un-defp103.14.4-alt16.1.90-alt1ALT-PU-2014-1634-1119753Fixed
kernel-image-un-defp93.14.4-alt15.10.218-alt1ALT-PU-2014-1634-1119753Fixed
kernel-image-un-defc10f13.14.4-alt16.1.85-alt0.c10f.1ALT-PU-2014-1634-1119753Fixed
kernel-image-un-defc9f23.14.4-alt15.10.29-alt2ALT-PU-2014-1634-1119753Fixed
kernel-image-un-defc73.14.4-alt14.9.277-alt0.M70C.1ALT-PU-2014-1638-1119815Fixed
kernel-image-un-defp113.14.4-alt16.6.31-alt1ALT-PU-2014-1634-1119753Fixed
usbipsisyphus5.10-alt15.10-alt1ALT-PU-2023-1798-1320453Fixed
usbipsisyphus_e2k5.10-alt15.10-alt1ALT-PU-2023-7452-1-Fixed
usbipp105.10-alt15.10-alt1ALT-PU-2023-1903-1320461Fixed
usbipp10_e2k5.10-alt15.10-alt1ALT-PU-2023-7498-1-Fixed
usbipp115.10-alt15.10-alt1ALT-PU-2023-1798-1320453Fixed

References to Advisories, Solutions, and Tools

Hyperlink
Resource
[oss-security] 20140509 Re: CVE request Linux kernel: filter: prevent nla extensions to peek beyond the end of the message
  • Mailing List
  • Patch
  • Third Party Advisory
https://github.com/torvalds/linux/commit/05ab8f2647e4221cbdb3856dd7d32bd5407316b3
  • Exploit
  • Patch
  • Third Party Advisory
58990
  • Broken Link
67309
  • Third Party Advisory
  • VDB Entry
59597
  • Broken Link
60613
  • Not Applicable
59311
  • Not Applicable
http://linux.oracle.com/errata/ELSA-2014-3052.html
  • Third Party Advisory
USN-2264-1
  • Third Party Advisory
USN-2263-1
  • Third Party Advisory
USN-2262-1
  • Third Party Advisory
USN-2261-1
  • Third Party Advisory
USN-2259-1
  • Third Party Advisory
USN-2252-1
  • Third Party Advisory
USN-2251-1
  • Third Party Advisory
DSA-2949
  • Third Party Advisory
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=05ab8f2647e4221cbdb3856dd7d32bd5407316b3

      1. Configuration 1

        cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
        End including
        3.14.3

        Configuration 2

        cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*

        Configuration 3

        cpe:2.3:o:canonical:ubuntu_linux:13.10:*:*:*:*:*:*:*
        cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*
        cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*

        Configuration 4

        cpe:2.3:o:oracle:linux:6:-:*:*:*:*:*:*
        cpe:2.3:o:oracle:linux:7:-:*:*:*:*:*:*
    VKontakte|Telegram|YouTube|Forum|GitHub|Bugzilla
    Version: v24.5.3
    Back to top