Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2014-2523
HistoryMar 24, 2014 - 4:40 p.m.

CVE-2014-2523

2014-03-2416:40:48
CWE-20
[email protected]
web.nvd.nist.gov
136
cve
2014
2523
linux kernel
denial of service
execute arbitrary code
dccp packet
nvd

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.2 High

AI Score

Confidence

High

0.075 Low

EPSS

Percentile

94.1%

JSON

net/netfilter/nf_conntrack_proto_dccp.c in the Linux kernel through 3.13.6 uses a DCCP header pointer incorrectly, which allows remote attackers to cause a denial of service (system crash) or possibly execute arbitrary code via a DCCP packet that triggers a call to the (1) dccp_new, (2) dccp_packet, or (3) dccp_error function.

Affected configurations

NVD
Node
linuxlinux_kernelRange<3.2.57
OR
linuxlinux_kernelRange3.3–3.4.86
OR
linuxlinux_kernelRange3.5–3.10.36
OR
linuxlinux_kernelRange3.11–3.12.17
OR
linuxlinux_kernelRange3.13.0–3.13.9
Node
canonicalubuntu_linuxMatch10.04-

Related

ibm 6
altlinux 3
nvd 1
ubuntucve 1
seebug 1
prion 1
debiancve 1
cvelist 1
securityvulns 3
nessus 31
ubuntu 8
openvas 77
oraclelinux 4
redhat 6
centos 1
amazon 1
veracode 6
suse 9
fedora 36
debian 1
osv 1
ibm
ibm
Security Bulletin: IBM MQ Appliance is affected by a kernel vulnerability (CVE-2014-2523)
2018-07-31 13:47:03
Security Bulletin: IBM DataPower Gateways is affected by a kernel vulnerability (CVE-2014-2523)
2018-09-25 14:20:01
Security Bulletin: IBM Security Directory Suite is affected by multiple vulnerabilities (CVE-2016-10142, CVE-2015-3331, CVE-2014-2523)
2019-03-28 17:55:02
altlinux
altlinux
Security fix for the ALT Linux 7 package kernel-image-un-def version 1:3.13.6-alt2
2014-03-21 00:00:00
Security fix for the ALT Linux 7 package kernel-image-el-def version 2.6.32-alt19
2014-03-22 00:00:00
Security fix for the ALT Linux 7 package kernel-image-el-def version 2.6.32-alt22
2014-05-09 00:00:00
nvd
nvd
CVE-2014-2523
2014-03-24 16:40:48
ubuntucve
ubuntucve
CVE-2014-2523
2014-03-24 00:00:00
seebug
seebug
Linux Kernel DCCP报文处理内存破坏漏洞
2014-03-19 00:00:00
prion
prion
Design/Logic Flaw
2014-03-24 16:40:00
debiancve
debiancve
CVE-2014-2523
2014-03-24 16:40:48
cvelist
cvelist
CVE-2014-2523
2014-03-24 10:00:00
securityvulns
securityvulns
[USN-2173-1] Linux kernel vulnerabilities
2014-05-04 00:00:00
[USN-2228-1] Linux kernel vulnerabilities
2014-05-29 00:00:00
Linux kernel multiple security vulnerabilities
2014-05-29 00:00:00
nessus
nessus
Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2014-3016)
2014-03-28 00:00:00
RHEL 6 : kernel (RHSA-2014:0593)
2014-11-08 00:00:00
Ubuntu 10.04 LTS : linux vulnerabilities (USN-2173-1)
2014-04-27 00:00:00
ubuntu
ubuntu
Linux kernel vulnerabilities
2014-04-26 00:00:00
Linux kernel (EC2) vulnerabilities
2014-04-26 00:00:00
Linux kernel (Raring HWE) vulnerabilities
2014-05-27 00:00:00
openvas
openvas
Ubuntu Update for linux USN-2173-1
2014-05-02 00:00:00
Ubuntu Update for linux-ec2 USN-2174-1
2014-05-02 00:00:00
Oracle: Security Advisory (ELSA-2014-3016)
2015-10-06 00:00:00
oraclelinux
oraclelinux
Unbreakable Enterprise kernel security update
2014-03-27 00:00:00
unbreakable enterprise kernel security update
2014-03-26 00:00:00
unbreakable enterprise kernel security update
2014-03-26 00:00:00
redhat
redhat
(RHSA-2014:0593) Important: kernel security and bug fix update
2014-06-03 00:00:00
(RHSA-2014:0520) Important: kernel security and bug fix update
2014-05-20 00:00:00
(RHSA-2014:0634) Important: kernel security and bug fix update
2014-06-04 00:00:00
centos
centos
kernel, perf, python security update
2014-05-08 17:53:25
amazon
amazon
Medium: kernel
2014-04-22 10:53:00
veracode
veracode
Sensitive Information Disclosure
2019-05-02 04:57:44
Sensitive Information Disclosure
2019-05-02 04:57:44
Denial Of Service (DoS)
2019-05-02 04:57:44
suse
suse
kernel: security and bugfix update (important)
2014-05-19 14:04:14
kernel: security and bugfix update (important)
2014-05-19 14:10:36
Security update for Linux Kernel (important)
2014-06-18 01:04:38
fedora
fedora
[SECURITY] Fedora 20 Update: kernel-3.13.7-200.fc20
2014-03-28 03:16:19
[SECURITY] Fedora 20 Update: kernel-3.13.8-200.fc20
2014-04-04 09:46:22
[SECURITY] Fedora 20 Update: kernel-3.13.9-200.fc20
2014-04-09 00:58:17
debian
debian
[SECURITY] [DSA 2906-1] linux-2.6 security update
2014-04-25 00:12:10
osv
osv
linux-2.6 - several
2014-04-24 00:00:00

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.2 High

AI Score

Confidence

High

0.075 Low

EPSS

Percentile

94.1%

JSON
Related for CVE-2014-2523
ibm6altlinux3nvd1ubuntucve1seebug1prion1debiancve1cvelist1securityvulns3nessus31ubuntu8openvas77oraclelinux4redhat6centos1amazon1veracode6suse9fedora36debian1osv1