CVE-2014-2309

Common vulnerabilities & exposures (CVE)

CVE database CVE database blogpost Release & EoL database

Published at: - 11-03-2014 02:01

Last modified: - 21-09-2022 08:44

Total changes: - 2

Description

The ip6_route_add function in net/ipv6/route.c in the Linux kernel through 3.13.6 does not properly count the addition of routes, which allows remote attackers to cause a denial of service (memory consumption) via a flood of ICMPv6 Router Advertisement packets.

Common Vulnerability Scoring System (CVSS)

AV:A/AC:L/Au:N/C:N/I:N/A:C

Low

Attack complexity

Adjacent

Attack vector

High

Availability

None

Confidentiality

None

Integrity

Privileges required

Scope

User interaction

6.1

Base score

6.5

6.9

Exploitability score

Impact score

Verification logic

Reference

[oss-security] 20140307 Re: CVE Request: Linux kernel: IPv6: crash due to router advertisement flooding-Mailing List, Third Party Advisory
http://git.kernel.org/cgit/linux/kernel/git/davem/net.git/commit/?id=c88507fbad8055297c1d1e21e599f46960cbee39
1029894-Third Party Advisory, VDB Entry
57250-Third Party Advisory
66095-Third Party Advisory, VDB Entry
SUSE-SU-2015:0481-Mailing List, Third Party Advisory
openSUSE-SU-2015:0566-Mailing List, Third Party Advisory

Keywords

CVE-2014-2309

Common vulnerabilities & exposures (CVE)

Description

Common Vulnerability Scoring System (CVSS)

Verification logic

Reference

NVD

CVE-2014-2309

CVE

Common vulnerabilities & exposures

CVSS

Common vulnerability scoring system

Security

Vulnerabilities

Exposures