CVE-2014-2851

Description

Integer overflow in the ping_init_sock function in net/ipv4/ping.c in the Linux kernel through 3.14.1 allows local users to cause a denial of service (use-after-free and system crash) or possibly gain privileges via a crafted application that leverages an improperly managed reference counter.

Weakness classification

• nvd@nist.gov: CWE-416

Primary references

• cve@mitre.org — Broken Link
• cve@mitre.org — Broken Link
• cve@mitre.org — Third Party Advisory
• cve@mitre.org — Mailing List, Patch, Third Party Advisory
• cve@mitre.org — Third Party Advisory, VDB Entry
• cve@mitre.org — Third Party Advisory, VDB Entry
• cve@mitre.org — Issue Tracking, Patch, Third Party Advisory
• cve@mitre.org — Exploit, Patch, Vendor Advisory
• cve@mitre.org — Mailing List, Patch, Vendor Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Broken Link
• af854a3a-2127-422b-91ae-364da2661108 — Broken Link
• af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory