VULNERABILITY INTELLIGENCE

CVE-2014-4943

CVSS score6.9 MEDIUM
EPSS probability2.10%
CISA KEVNot currently listed
Published2014-07-19
Last modified2026-06-17
CVSS vectorAV:L/AC:M/Au:N/C:C/I:C/A:C

Description

The PPPoL2TP feature in net/l2tp/l2tp_ppp.c in the Linux kernel through 3.15.6 allows local users to gain privileges by leveraging data-structure differences between an l2tp socket and an inet socket.

Weakness classification

  • CWE-269: Improper Privilege Management

Primary references