ISOMAN

CVE

CVE-2014-2568

Use-after-free vulnerability in the nfqnl_zcopy function in net/netfilter/nfnetlink_queue_core.c in the Linux kernel through 3.13.6 allows attackers to obtain sensitive information from kernel memory by leveraging the absence of a certain orphaning operation. NOTE: the affected code was moved to the skb_zerocopy function in net/core/skbuff.c before the vulnerability was announced.

Severity
LOW
CVSS
2.9
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu14.04.6 amd64 desktopunknownsource
Ubuntu14.04.6 i386 desktopunknownsource
Ubuntu14.04.6 amd64 serverunknownsource
Ubuntu14.04.6 i386 serverunknownsource

References

  1. http://seclists.org/oss-sec/2014/q1/627
  2. http://secunia.com/advisories/59599
  3. http://www.openwall.com/lists/oss-security/2014/03/20/16
  4. http://www.securityfocus.com/bid/66348
  5. http://www.ubuntu.com/usn/USN-2240-1
  6. https://bugzilla.redhat.com/show_bug.cgi?id=1079012
  7. https://exchange.xforce.ibmcloud.com/vulnerabilities/91922
  8. https://lkml.org/lkml/2014/3/20/421
  9. http://seclists.org/oss-sec/2014/q1/627
  10. http://secunia.com/advisories/59599
  11. http://www.openwall.com/lists/oss-security/2014/03/20/16
  12. http://www.securityfocus.com/bid/66348
  13. http://www.ubuntu.com/usn/USN-2240-1
  14. https://bugzilla.redhat.com/show_bug.cgi?id=1079012
  15. https://exchange.xforce.ibmcloud.com/vulnerabilities/91922
  16. https://lkml.org/lkml/2014/3/20/421