Name: CVE-2014-3535: Improper Restriction of Operations within the Bounds of a Memory Buffer
Creator: Rapid7
Published: 2014-09-28T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2014-3535, CWE-119, CVSS 7.5, EPSS 0.0415

include/linux/netdevice.h in the Linux kernel before 2.6.36 incorrectly uses macros for netdev_printk and its related logging implementation, which allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) by sending invalid packets to a VxLAN interface.

CVSS Details

CVSS 3.1 Base Score: 7.5

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Centos_linux	—	Upgrade kernel-firmwareUpgrade kernel-abi-whitelistsUpgrade kernel-headersUpgrade kernel-docUpgrade kernel-debug-develUpgrade perfUpgrade kernel-debugUpgrade python-perfUpgrade kernel-develUpgrade kernel	Dec 1, 2016	Sep 28, 2014
Oracle_linux	—	Upgrade kernel-uekUpgrade kernel	Oct 16, 2024	Sep 28, 2014
Ubuntu	—	Upgrade linux-raspi2	Nov 19, 2024	Sep 28, 2014

Prioritise with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritise with Active Threat Intelligence