Back to CVE Browser

CVE-2014-2523

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.1610%

EPSS Percentile39.16th

PublishedMar 24, 2014

Last ModifiedMay 6, 2026

Vulnerability Description

net/netfilter/nf_conntrack_proto_dccp.c in the Linux kernel through 3.13.6 uses a DCCP header pointer incorrectly, which allows remote attackers to cause a denial of service (system crash) or possibly execute arbitrary code via a DCCP packet that triggers a call to the (1) dccp_new, (2) dccp_packet, or (3) dccp_error function.

Affected Platforms (CPE)

💻

Linux

Linux Kernel

< 3.2.57

💻

Linux

Linux Kernel

>= 3.3 and < 3.4.86

💻

Linux

Linux Kernel

>= 3.5 and < 3.10.36

💻

Linux

Linux Kernel

>= 3.11 and < 3.12.17

💻

Linux

Linux Kernel

>= 3.13.0 and < 3.13.9

💻

Canonical

Ubuntu Linux

= 10.04

References & Advisories

🔗 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b22f5126a24b3b2f15448c3f2a254fc10cbc2b92

🔗 http://secunia.com/advisories/57446

🔗 http://twitter.com/grsecurity/statuses/445496197399461888

🔗 http://www.openwall.com/lists/oss-security/2014/03/17/7

🔗 http://www.securityfocus.com/bid/66279

🔗 http://www.securitytracker.com/id/1029945

🔗 http://www.ubuntu.com/usn/USN-2173-1

🔗 http://www.ubuntu.com/usn/USN-2174-1

Related Vulnerabilities

CVE-2000-074710.0

The logrotate script for OpenLDAP before 1.2.11 in Conectiva Linux sends an improper signal to the kernel log daemon (klogd) and k...

CVE-2002-157210.0

Signed integer overflow in the bttv_read function in the bttv driver (bttv-driver.c) in Linux kernel before 2.4.20 has unknown imp...

CVE-2000-050610.0

The "capabilities" feature in Linux before 2.2.16 allows local users to cause a denial of service or gain privileges by setting th...

CVE-2002-157310.0

Unspecified vulnerability in the pcilynx ieee1394 firewire driver (pcilynx.c) in Linux kernel before 2.4.20 has unknown impact and...