Vulnerability Database

299,455

Total vulnerabilities in the database

CVE-2014-2523

net/netfilter/nf_conntrack_proto_dccp.c in the Linux kernel through 3.13.6 uses a DCCP header pointer incorrectly, which allows remote attackers to cause a denial of service (system crash) or possibly execute arbitrary code via a DCCP packet that triggers a call to the (1) dccp_new, (2) dccp_packet, or (3) dccp_error function.

  • Published: Mar 24, 2014
  • Updated: Apr 13, 2023
  • CVE: CVE-2014-2523
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 10
  • AV:N/AC:L/Au:N/C:C/I:C/A:C

CWEs:

Software From Fixed in
linux / linux_kernel - 3.2.57
linux / linux_kernel 3.3 3.4.86
linux / linux_kernel 3.5 3.10.36
linux / linux_kernel 3.11 3.12.17
linux / linux_kernel 3.13.0 3.13.9
canonical / ubuntu_linux 10.04 10.04.x