CVE-2014-2706

CWE-362 — Race Condition15 documents9 sources
Severity
7.1HIGH
EPSS
3.1%
top 13.20%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
5
Linux Linux KernelOracle LinuxSuse Linux Enterprise High Availability Extension+2 more
Timeline
PublishedApr 14
Latest updateMay 13

Description

Race condition in the mac80211 subsystem in the Linux kernel before 3.13.7 allows remote attackers to cause a denial of service (system crash) via network traffic that improperly interacts with the WLAN_STA_PS_STA state (aka power-save mode), related to sta_info.c and tx.c.

CVSS vector

AV:N/AC:M/C:N/I:N/A:CExploitability: 8.6 | Impact: 6.9

Affected Packages6 packages

▶NVDlinux/linux_kernel3.3 — 3.4.84+4
▶Debianlinux< 3.13.7-1+3
▶NVDoracle/linux6, 7+1

Patches

Patch: www.kernel.org ↗Patch: www.openwall.com ↗Patch: bugzilla.redhat.com ↗

🔴Vulnerability Details

3
GHSA
GHSA-9f85-cxh7-mffh: Race condition in the mac80211 subsystem in the Linux kernel before 3↗2022-05-13
▶
OSV
CVE-2014-2706: Race condition in the mac80211 subsystem in the Linux kernel before 3↗2014-04-14
▶
CVEList
CVE-2014-2706: Race condition in the mac80211 subsystem in the Linux kernel before 3↗2014-04-14
▶

📋Vendor Advisories

9
Android
CVE-2014-2706: Android Security Bulletin 2017-04-01 CVE: CVE-2014-2706 Severity: HIGH References: A-34160553 Upstream kernel↗2017-04-01
▶
Ubuntu
Linux kernel (Saucy HWE) vulnerabilities↗2014-05-27
▶
Ubuntu
Linux kernel (OMAP4) vulnerabilities↗2014-05-27
▶
Ubuntu
Linux kernel (Quantal HWE) vulnerabilities↗2014-05-27
▶
Ubuntu
Linux kernel vulnerabilities↗2014-05-27
▶

💬Community

2
Bugzilla
CVE-2014-2706 Kernel: net: mac80211: crash dues to AP powersave TX vs. wakeup race↗2014-04-02
▶
Bugzilla
CVE-2014-2706 Kernel: net: mac80211: crash dues to AP powersave TX vs. wakeup race [fedora-all]↗2014-04-02
▶
CVE-2014-2706 (HIGH CVSS 7.1) | Race condition in the mac80211 subs | cvebase.io