Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2014-8160
HistoryMar 02, 2015 - 11:59 a.m.

CVE-2014-8160

2015-03-0211:59:02
CWE-20
[email protected]
web.nvd.nist.gov
1

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

6 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.1%

JSON

net/netfilter/nf_conntrack_proto_generic.c in the Linux kernel before 3.18 generates incorrect conntrack entries during handling of certain iptables rule sets for the SCTP, DCCP, GRE, and UDP-Lite protocols, which allows remote attackers to bypass intended access restrictions via packets with disallowed port numbers.

Affected configurations

NVD
Node
linuxlinux_kernelRange<3.18
Node
opensuseopensuseMatch13.1
OR
suselinux_enterprise_desktopMatch12
OR
suselinux_enterprise_real_time_extensionMatch11sp3
OR
suselinux_enterprise_serverMatch11sp1ltss
OR
suselinux_enterprise_serverMatch12-
OR
suselinux_enterprise_software_development_kitMatch12-
OR
suselinux_enterprise_workstation_extensionMatch12
Node
redhatenterprise_linux_desktopMatch6.0
OR
redhatenterprise_linux_desktopMatch7.0
OR
redhatenterprise_linux_serverMatch6.0
OR
redhatenterprise_linux_serverMatch7.0
OR
redhatenterprise_linux_server_ausMatch6.5
OR
redhatenterprise_linux_server_ausMatch6.6
OR
redhatenterprise_linux_server_ausMatch7.3
OR
redhatenterprise_linux_server_ausMatch7.6
OR
redhatenterprise_linux_server_eusMatch6.5
OR
redhatenterprise_linux_server_eusMatch6.6
OR
redhatenterprise_linux_server_eusMatch7.3
OR
redhatenterprise_linux_server_eusMatch7.4
OR
redhatenterprise_linux_server_eusMatch7.5
OR
redhatenterprise_linux_server_eusMatch7.6
OR
redhatenterprise_linux_server_eusMatch7.7
OR
redhatenterprise_linux_server_tusMatch6.5
OR
redhatenterprise_linux_server_tusMatch6.6
OR
redhatenterprise_linux_server_tusMatch7.6
OR
redhatenterprise_linux_server_tusMatch7.7
OR
redhatenterprise_linux_workstationMatch6.0
OR
redhatenterprise_linux_workstationMatch7.0
Node
debiandebian_linuxMatch7.0
OR
debiandebian_linuxMatch8.0
Node
canonicalubuntu_linuxMatch12.04lts
OR
canonicalubuntu_linuxMatch14.04lts
OR
canonicalubuntu_linuxMatch14.10

References

Related

cvelist 1
ubuntucve 1
prion 1
cve 1
debiancve 1
openvas 39
nessus 35
mageia 3
oraclelinux 6
redhat 3
centos 2
ubuntu 9
suse 6
f5 2
ibm 1
osv 2
debian 2
securityvulns 2
fedora 5
lenovo 1
cvelist
cvelist
CVE-2014-8160
2015-03-02 11:00:00
ubuntucve
ubuntucve
CVE-2014-8160
2014-12-31 00:00:00
prion
prion
Design/Logic Flaw
2015-03-02 11:59:00
cve
cve
CVE-2014-8160
2015-03-02 11:59:02
debiancve
debiancve
CVE-2014-8160
2015-03-02 11:59:02
openvas
openvas
Mageia: Security Advisory (MGASA-2015-0210)
2022-01-28 00:00:00
Mageia: Security Advisory (MGASA-2015-0221)
2022-01-28 00:00:00
Oracle: Security Advisory (ELSA-2015-0674)
2015-10-06 00:00:00
nessus
nessus
Mandriva Linux Security Advisory : kernel (MDVSA-2015:057)
2015-03-19 00:00:00
CentOS 6 : kernel (CESA-2015:0674)
2015-03-13 00:00:00
Scientific Linux Security Update : kernel on SL6.x i386/x86_64 (20150311)
2015-03-13 00:00:00
mageia
mageia
Updated kernel packages fix security vulnerabilities
2015-05-11 23:10:38
Updated kernel-linus packages fix security vulnerabilities
2015-05-13 20:18:54
Updated kernel-tmb packages fix security vulnerabilities
2015-05-13 18:54:07
oraclelinux
oraclelinux
kernel security and bug fix update
2015-03-11 00:00:00
Unbreakable Enterprise kernel security update
2015-03-13 00:00:00
Unbreakable Enterprise kernel security update
2015-03-13 00:00:00
redhat
redhat
(RHSA-2015:0674) Important: kernel security and bug fix update
2015-03-11 00:00:00
(RHSA-2015:0284) Important: kernel security and bug fix update
2015-03-03 00:00:00
(RHSA-2015:0290) Important: kernel security, bug fix, and enhancement update
2015-03-05 00:00:00
centos
centos
kernel, perf, python security update
2015-03-12 15:31:30
kernel, perf, python security update
2015-03-17 13:28:28
ubuntu
ubuntu
Linux kernel vulnerabilities
2015-02-26 00:00:00
Linux kernel (OMAP4) vulnerabilities
2015-02-26 00:00:00
Linux kernel (Trusty HWE) vulnerabilities regression
2015-03-04 00:00:00
suse
suse
Security update for the Linux Kernel (important)
2015-03-18 22:04:55
Security update for the Linux Kernel (important)
2015-04-13 14:17:21
Security update for Linux Kernel (important)
2015-04-13 14:04:48
f5
f5
K17121 : Linux network subsystem vulnerabilities CVE-2014-8160, CVE-2014-8172, CVE-2014-8173, CVE-2014-9428, CVE-2014-9644, CVE-2015-0274, and CVE-2015-2041
2015-08-12 00:00:00
SOL17121 - Linux network subsystem vulnerabilities CVE-2014-8160, CVE-2014-8172, CVE-2014-8173, CVE-2014-9428, CVE-2014-9644, CVE-2015-0274, and CVE-2015-2041
2015-08-12 00:00:00
ibm
ibm
Security Bulletin: Multiple Kernel vulnerabilities affect PowerKVM (Multiple CVEs)
2018-06-18 01:28:02
osv
osv
linux-2.6 - security update
2015-02-18 00:00:00
linux - security update
2015-02-23 00:00:00
debian
debian
[SECURITY] [DLA 155-1] linux-2.6 security update
2015-02-18 23:22:13
[SECURITY] [DSA 3170-1] linux security update
2015-02-23 17:42:49
securityvulns
securityvulns
[SECURITY] [DSA 3170-1] linux security update
2015-03-07 00:00:00
Linux kernel multiple security vulnerabilities
2015-03-15 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: kernel-3.18.9-100.fc20
2015-03-14 09:15:43
[SECURITY] Fedora 20 Update: kernel-3.18.5-101.fc20
2015-02-07 04:01:15
[SECURITY] Fedora 20 Update: kernel-3.19.3-100.fc20
2015-04-07 07:29:52
lenovo
lenovo
AMI MegaRAC SP-X BMC Vulnerabilities - Lenovo Support US
2020-04-13 19:22:04

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

6 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.1%

JSON
Related for NVD:CVE-2014-8160
cvelist1ubuntucve1prion1cve1debiancve1openvas39nessus35mageia3oraclelinux6redhat3centos2ubuntu9suse6f52ibm1osv2debian2securityvulns2fedora5lenovo1