Description
A certain Debian patch to the IPv6 implementation in the Linux kernel 3.2.x through 3.2.63 does not properly validate arguments in ipv6_select_ident function calls, which allows local users to cause a denial of service (NULL pointer dereference and system crash) by leveraging (1) tun or (2) macvtap device access.
Analysis and contextual insights are available on OpenCVE Cloud.
Remediation
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
Debian DSA |
DSA-3060-1 | linux security update |
EUVD |
EUVD-2014-7080 | A certain Debian patch to the IPv6 implementation in the Linux kernel 3.2.x through 3.2.63 does not properly validate arguments in ipv6_select_ident function calls, which allows local users to cause a denial of service (NULL pointer dereference and system crash) by leveraging (1) tun or (2) macvtap device access. |
Ubuntu USN |
USN-2417-1 | Linux kernel vulnerabilities |
Ubuntu USN |
USN-2418-1 | Linux kernel (OMAP4) vulnerabilities |
References
History
No history.
Status: PUBLISHED
Assigner: debian
Published:
Updated: 2024-08-06T12:40:19.223Z
Reserved: 2014-09-27T00:00:00.000Z
Link: CVE-2014-7207
No data.
Status : Modified
Published: 2014-11-10T11:55:08.080
Modified: 2026-05-06T22:30:45.220
Link: CVE-2014-7207
No data.
OpenCVE Enrichment
No data.
Weaknesses
Debian DSA
EUVD
Ubuntu USN