Integer overflow in the ping_init_sock function in net/ipv4/ping.c in the Linux kernel through 3.14.1 allows local users to cause a denial of service (use-after-free and system crash) or possibly gain privileges via a crafted application that leverages an improperly managed reference counter.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-firmwareUpgrade kernelUpgrade kernel-debugUpgrade kernel-docUpgrade kernel-develUpgrade python-perfUpgrade kernel-debug-develUpgrade kernel-abi-whitelistsUpgrade kernel-headersUpgrade perf | Dec 1, 2016 | Apr 14, 2014 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 14, 2014 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Apr 14, 2014 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-docs | Dec 18, 2015 | Apr 14, 2014 |
| Ubuntu | — | Upgrade linux-image-3.13.0-30-genericUpgrade linux-image-3.8.0-41-genericUpgrade linux-image-3.2.0-63-powerpc-smpUpgrade linux-image-3.2.0-63-virtualUpgrade linux-image-3.2.0-63-generic-paeUpgrade linux-image-3.13.0-27-lowlatencyUpgrade linux-image-3.2.0-63-highbankUpgrade linux-image-3.13.0-27-powerpc64-embUpgrade linux-image-3.13.0-27-genericUpgrade linux-image-3.2.0-63-omapUpgrade linux-image-3.13.0-27-powerpc-smpUpgrade linux-image-3.13.0-27-generic-lpaeUpgrade linux-image-3.2.0-63-genericUpgrade linux-image-3.13.0-30-generic-lpaeUpgrade linux-image-3.2.0-1446-omap4Upgrade linux-image-3.13.0-27-powerpc-e500Upgrade linux-image-3.2.0-63-powerpc64-smpUpgrade linux-image-3.13.0-27-powerpc-e500mcUpgrade linux-image-3.5.0-51-genericUpgrade linux-image-3.13.0-27-powerpc64-smpUpgrade linux-image-3.11.0-22-genericUpgrade linux-image-3.11.0-22-generic-lpae | Nov 8, 2024 | Apr 14, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub