Integer overflow in the ping_init_sock function in net/ipv4/ping.c in the Linux kernel through 3.14.1 allows local users to cause a denial of service (use-after-free and system crash) or possibly gain privileges via a crafted application that leverages an improperly managed reference counter.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-firmwareUpgrade kernelUpgrade kernel-abi-whitelistsUpgrade kernel-headersUpgrade kernel-docUpgrade perfUpgrade kernel-debug-develUpgrade kernel-develUpgrade python-perfUpgrade kernel-debug | Dec 1, 2016 | Apr 14, 2014 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 14, 2014 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Apr 14, 2014 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-default | Dec 18, 2015 | Apr 14, 2014 |
| Ubuntu | — | Upgrade linux-image-3.5.0-51-genericUpgrade linux-image-3.11.0-22-generic-lpaeUpgrade linux-image-3.13.0-27-powerpc-e500Upgrade linux-image-3.13.0-27-powerpc64-smpUpgrade linux-image-3.13.0-27-powerpc-e500mcUpgrade linux-image-3.11.0-22-genericUpgrade linux-image-3.2.0-63-powerpc64-smpUpgrade linux-image-3.2.0-63-virtualUpgrade linux-image-3.2.0-63-genericUpgrade linux-image-3.2.0-63-generic-paeUpgrade linux-image-3.13.0-27-lowlatencyUpgrade linux-image-3.2.0-63-powerpc-smpUpgrade linux-image-3.13.0-27-genericUpgrade linux-image-3.13.0-30-generic-lpaeUpgrade linux-image-3.13.0-27-generic-lpaeUpgrade linux-image-3.2.0-63-highbankUpgrade linux-image-3.2.0-1446-omap4Upgrade linux-image-3.13.0-27-powerpc-smpUpgrade linux-image-3.13.0-30-genericUpgrade linux-image-3.8.0-41-genericUpgrade linux-image-3.13.0-27-powerpc64-embUpgrade linux-image-3.2.0-63-omap | Nov 8, 2024 | Apr 14, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub