CVE-2014-3145Out-of-bounds Read in Kernel

CWE-125Out-of-bounds Read18 documents9 sources
Severity
4.9MEDIUMNVD
EPSS
0.1%
top 82.18%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedMay 11
Latest updateMay 13

Description

The BPF_S_ANC_NLATTR_NEST extension implementation in the sk_run_filter function in net/core/filter.c in the Linux kernel through 3.14.3 uses the reverse order in a certain subtraction, which allows local users to cause a denial of service (over-read and system crash) via crafted BPF instructions. NOTE: the affected code was moved to the __skb_get_nlattr_nest function before the vulnerability was announced.

CVSS vector

AV:L/AC:L/C:N/I:N/A:CExploitability: 3.9 | Impact: 6.9

Affected Packages3 packages

Debianlinux/linux_kernel< 3.14.4-1+3
NVDlinux/linux_kernel3.14.3
NVDoracle/linux6, 7+1

Also affects: Debian Linux 7.0, Ubuntu Linux 10.04, 12.04, 13.10

Patches

🔴Vulnerability Details

3
GHSA
GHSA-j8w5-jmwr-rhqh: The BPF_S_ANC_NLATTR_NEST extension implementation in the sk_run_filter function in net/core/filter2022-05-13
OSV
CVE-2014-3145: The BPF_S_ANC_NLATTR_NEST extension implementation in the sk_run_filter function in net/core/filter2014-05-11
CVEList
CVE-2014-3145: The BPF_S_ANC_NLATTR_NEST extension implementation in the sk_run_filter function in net/core/filter2014-05-11

📋Vendor Advisories

12
Android
CVE-2014-3145: Android Security Bulletin 2017-04-01 CVE: CVE-2014-3145 Severity: HIGH References: A-34469585 Upstream kernel [2]2017-04-01
Ubuntu
Linux kernel (Raring HWE) vulnerabilities2014-07-17
Ubuntu
Linux kernel vulnerabilities2014-07-17
Ubuntu
Linux kernel (Trusty HWE) vulnerabilities2014-07-17
Ubuntu
Linux kernel vulnerabilities2014-06-27

💬Community

2
Bugzilla
CVE-2014-3144 CVE-2014-3145 Kernel: filter: prevent nla extensions to peek beyond the end of the message2014-05-12
Bugzilla
CVE-2014-3144 CVE-2014-3145 Kernel: filter: prevent nla extensions to peek beyond the end of the message [fedora-all]2014-05-12
CVE-2014-3145 — Out-of-bounds Read in Linux Kernel | cvebase