CVE-2014-3144: Integer Overflow
Last updated 24 July 2024
Other sources
The (1) BPFSANCNLATTR and (2) BPFSANCNLATTRNEST extension implementations in the skrunfilter function in net/core/filter.c in the Linux kernel through 3.14.3 do not check whether a certain length value is sufficiently large, which allows local users to cause a denial of service (integer underflow and system crash) via crafted BPF instructions. NOTE: the affected code was moved to the skbgetnlattr and skbgetnlattrnest functions before the vulnerability was announced.
— NVD
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2014-3144?
CVE-2014-3144 has a moderate severity rating due to potential denial of service vulnerabilities.
How do I fix CVE-2014-3144?
To fix CVE-2014-3144, upgrade to kernel versions 3.14.4 or higher or apply the relevant patches provided by your Linux distribution.
Which versions of Linux are affected by CVE-2014-3144?
CVE-2014-3144 affects Linux kernel versions up to and including 3.14.3, as well as specific versions of Debian and Ubuntu Linux.
What are the potential impacts of exploiting CVE-2014-3144?
Exploiting CVE-2014-3144 can allow local users to cause a denial of service condition.
Is CVE-2014-3144 remotely exploitable?
No, CVE-2014-3144 is not remotely exploitable as it requires local user access to the system.