CVE - CVE-2014-2309

CVE-ID
CVE-2014-2309	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
The ip6_route_add function in net/ipv6/route.c in the Linux kernel through 3.13.6 does not properly count the addition of routes, which allows remote attackers to cause a denial of service (memory consumption) via a flood of ICMPv6 Router Advertisement packets.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
BID:66095 URL:http://www.securityfocus.com/bid/66095 CONFIRM:http://git.kernel.org/cgit/linux/kernel/git/davem/net.git/commit/?id=c88507fbad8055297c1d1e21e599f46960cbee39 MLIST:[oss-security] 20140307 Re: CVE Request: Linux kernel: IPv6: crash due to router advertisement flooding URL:http://www.openwall.com/lists/oss-security/2014/03/08/1 SECTRACK:1029894 URL:http://www.securitytracker.com/id/1029894 SECUNIA:57250 URL:http://secunia.com/advisories/57250 SUSE:SUSE-SU-2015:0481 URL:http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html SUSE:openSUSE-SU-2015:0566 URL:http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html
Assigning CNA
MITRE Corporation
Date Record Created
20140306	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20140306)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)