CVE-2014-0100 Race condition in the inet_frag_intern function in net/ipv4/inet_fragment.c in the Linux kernel through 3.13.6 allows remote attackers to cause a denial of service (use-after-free error) or possibly h...
HighCVSS 9.3
EPSS 3.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Race condition in the inet_frag_intern function in net/ipv4/inet_fragment.c in the Linux kernel through 3.13.6 allows remote attackers to cause a denial of service (use-after-free error) or possibly have unspecified other impact via a large series of fragmented ICMP Echo Request packets to a system with a heavy CPU load.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/linux(Debian:12) | < 3.13.6-1 | 3.13.6-1 |
| debian/linux(Debian:13) | < 3.13.6-1 | 3.13.6-1 |
| debian/linux(Debian:14) | < 3.13.6-1 | 3.13.6-1 |
| Linux kernel | >= 3.9, < 3.10.37 | 3.10.37 |
| Linux kernel | >= 3.11, < 3.12.18 | 3.12.18 |
| Linux kernel | >= 3.13, < 3.13.10 | 3.13.10 |
References
- Debian Security Tracker CVE-2014-0100 vendor-advisory
- patchwork.ozlabs.org patch third-party-advisory
- [oss-security] 20140304 CVE-2014-0100 -- Linux kernel: net: inet frag code race condition leading to user-after-free mailing-list patch third-party-advisory
- bugzilla.redhat.com issue-tracking patch third-party-advisory