net/netfilter/nf_conntrack_proto_dccp.c in the Linux kernel through 3.13.6 uses a DCCP header pointer incorrectly, which allows remote attackers to cause a denial of service (system crash) or possibly execute arbitrary code via a DCCP packet that triggers a call to the (1) dccp_new, (2) dccp_packet, or (3) dccp_error function.
CVSS Details
- CVSS 3.1 Base Score: 8.4
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-debug-develUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-firmwareUpgrade kernelUpgrade kernel-debugUpgrade kernel-abi-whitelistsUpgrade kernel-docUpgrade python-perfUpgrade perf | Dec 1, 2016 | Mar 24, 2014 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 24, 2014 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Mar 24, 2014 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kernel-zfcpdump | Dec 18, 2015 | Mar 24, 2014 |
| Ubuntu | — | Upgrade linux-image-2.6.32-58-ia64Upgrade linux-image-3.2.0-63-omapUpgrade linux-image-3.2.0-63-generic-paeUpgrade linux-image-2.6.32-58-powerpcUpgrade linux-image-2.6.32-58-sparc64-smpUpgrade linux-image-2.6.32-58-versatileUpgrade linux-image-3.11.0-22-genericUpgrade linux-image-3.2.0-63-highbankUpgrade linux-image-2.6.32-58-powerpc64-smpUpgrade linux-image-3.5.0-51-genericUpgrade linux-image-2.6.32-58-powerpc-smpUpgrade linux-image-3.2.0-63-genericUpgrade linux-image-3.8.0-41-genericUpgrade linux-image-2.6.32-58-virtualUpgrade linux-image-2.6.32-58-preemptUpgrade linux-image-3.2.0-63-powerpc-smpUpgrade linux-image-3.2.0-63-powerpc64-smpUpgrade linux-image-3.2.0-63-virtualUpgrade linux-image-2.6.32-58-generic-paeUpgrade linux-image-3.11.0-22-generic-lpaeUpgrade linux-image-2.6.32-363-ec2Upgrade linux-image-3.2.0-1446-omap4Upgrade linux-image-2.6.32-58-386Upgrade linux-image-2.6.32-58-sparc64Upgrade linux-image-2.6.32-58-genericUpgrade linux-image-2.6.32-58-lpiaUpgrade linux-image-2.6.32-58-server | Nov 8, 2024 | Mar 24, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub