Design/Logic Flaw

2014-03-2416:40:00

PRIOn knowledge base

www.prio-n.com

8.3 High

AI Score

Confidence

High

0.075 Low

EPSS

Percentile

94.1%

JSON

net/netfilter/nf_conntrack_proto_dccp.c in the Linux kernel through 3.13.6 uses a DCCP header pointer incorrectly, which allows remote attackers to cause a denial of service (system crash) or possibly execute arbitrary code via a DCCP packet that triggers a call to the (1) dccp_new, (2) dccp_packet, or (3) dccp_error function.

CPENameOperatorVersion
ubuntu_linuxeq10.04
linux_kernellt3.2.57
linux_kernelge3.3
linux_kernellt3.4.86
linux_kernelge3.5
linux_kernellt3.10.36
linux_kernelge3.11
linux_kernellt3.12.17
linux_kernelge3.13.0
linux_kernellt3.13.9

Name	Operator	Version
ubuntu_linux	eq	10.04
linux_kernel	lt	3.2.57
linux_kernel	ge	3.3
linux_kernel	lt	3.4.86
linux_kernel	ge	3.5
linux_kernel	lt	3.10.36
linux_kernel	ge	3.11
linux_kernel	lt	3.12.17
linux_kernel	ge	3.13.0
linux_kernel	lt	3.13.9