Executive Summary

Informations
Name CVE-2014-3535 First vendor Publication 2014-09-28
Vendor Cve Last vendor Modification 2024-11-21

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
 
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:N/I:N/A:C)
Cvss Base Score 7.8 Attack Range Network
Cvss Impact Score 6.9 Attack Complexity Low
Cvss Expoit Score 10 Authentication None Required
Calculate full CVSS 2.0 Vectors scores

Detail

include/linux/netdevice.h in the Linux kernel before 2.6.36 incorrectly uses macros for netdev_printk and its related logging implementation, which allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) by sending invalid packets to a VxLAN interface.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3535

CWE : Common Weakness Enumeration

% Id Name
100 % CWE-119 Failure to Constrain Operations within the Bounds of a Memory Buffer

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:26519
 
Oval ID: oval:org.mitre.oval:def:26519
Title: ELSA-2014-3081 -- Unbreakable Enterprise kernel security update (important)
Description: kernel-uek [3.8.13-44.1.3.el7uek] - ALSA: control: Don't access controls outside of protected regions (Lars-Peter Clausen) [Orabug: 19817785] {CVE-2014-4653} {CVE-2014-4654} {CVE-2014-4655} - ALSA: control: Fix replacing user controls (Lars-Peter Clausen) [Orabug: 19817747] {CVE-2014-4653} {CVE-2014-4654} {CVE-2014-4655} - kvm: iommu: fix the third parameter of kvm_iommu_put_pages (CVE-2014-3601) (Michael S. Tsirkin) [Orabug: 19817646] {CVE-2014-3601} - net: sctp: inherit auth_capable on INIT collisions (Daniel Borkmann) [Orabug: 19816067] {CVE-2014-5077}
Family: unix Class: patch
Reference(s): ELSA-2014-3081
CVE-2014-4653
CVE-2014-4654
CVE-2014-4655
CVE-2014-5077
CVE-2014-3601
CVE-2014-3535
 Version: 5
Platform(s): Oracle Linux 6
 Product(s): dtrace-modules
kernel-uek
kernel-uek-debug
kernel-uek-debug-devel
kernel-uek-devel
kernel-uek-doc
kernel-uek-firmware
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:26620
 
Oval ID: oval:org.mitre.oval:def:26620
Title: ELSA-2014-3086 -- Unbreakable Enterprise kernel security update (important)
Description: kernel-uek [2.6.32-400.36.10uek] - USB: whiteheat: Added bounds checking for bulk command response (James Forshaw) [Orabug: 19849336] {CVE-2014-3185} - HID: fix a couple of off-by-ones (Jiri Kosina) [Orabug: 19849320] {CVE-2014-3181} logging macros to functions (Joe Perches) [Orabug: 19847630] {CVE-2014-3535} logging macros to functions (Joe Perches) [Orabug: 19847630] - vsprintf: Recursive vsnprintf: Add '%pV', struct va_format (Joe Perches) [Orabug: 19847630] - KVM: x86: Improve thread safety in pit (Andy Honig) [Orabug: 19905688] {CVE-2014-3611}
Family: unix Class: patch
Reference(s): ELSA-2014-3086
CVE-2014-3611
CVE-2014-3185
CVE-2014-3181
CVE-2014-3535
 Version: 5
Platform(s): Oracle Linux 5
Oracle Linux 6
 Product(s): kernel-uek
mlnx_en
ofa
kernel-uek-debug
kernel-uek-debug-devel
kernel-uek-devel
kernel-uek-doc
kernel-uek-firmware
kernel-uek-headers
Definition Synopsis:

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 1
Os 1337

Nessus® Vulnerability Scanner

Date Description
2017-04-03 Name : The remote OracleVM host is missing one or more security updates.
File : oraclevm_OVMSA-2017-0057.nasl - Type : ACT_GATHER_INFO
2014-12-05 Name : The remote Oracle Linux host is missing one or more security updates.
File : oraclelinux_ELSA-2014-3096.nasl - Type : ACT_GATHER_INFO
2014-11-08 Name : The remote Red Hat host is missing a security update.
File : redhat-RHSA-2014-1168.nasl - Type : ACT_GATHER_INFO
2014-11-04 Name : The remote Oracle Linux host is missing one or more security updates.
File : oraclelinux_ELSA-2014-3086.nasl - Type : ACT_GATHER_INFO
2014-10-20 Name : The remote Oracle Linux host is missing one or more security updates.
File : oraclelinux_ELSA-2014-3081.nasl - Type : ACT_GATHER_INFO
2014-09-11 Name : The remote Red Hat host is missing one or more security updates.
File : redhat-RHSA-2014-1167.nasl - Type : ACT_GATHER_INFO
2014-09-10 Name : The remote CentOS host is missing one or more security updates.
File : centos_RHSA-2014-1167.nasl - Type : ACT_GATHER_INFO
2014-09-10 Name : The remote Oracle Linux host is missing one or more security updates.
File : oraclelinux_ELSA-2014-1167.nasl - Type : ACT_GATHER_INFO
2014-09-10 Name : The remote Scientific Linux host is missing one or more security updates.
File : sl_20140909_kernel_on_SL6_x.nasl - Type : ACT_GATHER_INFO

Sources (Detail)

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3...
http://mirror.linux.org.au/linux/kernel/v2.6/ChangeLog-2.6.36
http://www.securityfocus.com/bid/69721
https://bugzilla.redhat.com/show_bug.cgi?id=1114540
https://github.com/torvalds/linux/commit/256df2f3879efdb2e9808bdb1b54b16fbb11...
Source Url

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
Date Informations
2024-11-28 12:40:54
  • Multiple Updates
2024-08-02 12:28:22
  • Multiple Updates
2024-08-02 01:08:30
  • Multiple Updates
2024-02-02 01:27:34
  • Multiple Updates
2024-02-01 12:08:11
  • Multiple Updates
2023-09-05 12:26:07
  • Multiple Updates
2023-09-05 01:08:05
  • Multiple Updates
2023-09-02 12:26:07
  • Multiple Updates
2023-09-02 01:08:11
  • Multiple Updates
2023-08-12 12:28:26
  • Multiple Updates
2023-08-12 01:07:42
  • Multiple Updates
2023-08-11 12:24:15
  • Multiple Updates
2023-08-11 01:07:53
  • Multiple Updates
2023-08-06 12:23:34
  • Multiple Updates
2023-08-06 01:07:40
  • Multiple Updates
2023-08-04 12:23:37
  • Multiple Updates
2023-08-04 01:07:44
  • Multiple Updates
2023-07-14 12:23:36
  • Multiple Updates
2023-07-14 01:07:43
  • Multiple Updates
2023-03-29 01:25:27
  • Multiple Updates
2023-03-28 12:08:04
  • Multiple Updates
2023-02-13 05:28:18
  • Multiple Updates
2023-02-02 21:28:32
  • Multiple Updates
2022-10-11 12:21:18
  • Multiple Updates
2022-10-11 01:07:52
  • Multiple Updates
2022-03-11 01:17:34
  • Multiple Updates
2021-05-04 12:32:23
  • Multiple Updates
2021-04-22 01:39:25
  • Multiple Updates
2020-08-11 12:10:59
  • Multiple Updates
2020-08-08 01:10:58
  • Multiple Updates
2020-08-07 12:11:08
  • Multiple Updates
2020-08-01 12:10:58
  • Multiple Updates
2020-07-30 01:11:32
  • Multiple Updates
2020-05-23 01:52:10
  • Multiple Updates
2020-05-23 00:41:05
  • Multiple Updates
2019-01-25 12:06:19
  • Multiple Updates
2018-11-17 12:04:52
  • Multiple Updates
2018-10-30 12:06:55
  • Multiple Updates
2017-04-04 13:20:39
  • Multiple Updates
2016-06-30 21:38:04
  • Multiple Updates
2016-06-28 22:51:13
  • Multiple Updates
2016-04-27 00:51:54
  • Multiple Updates
2014-12-06 13:27:00
  • Multiple Updates
2014-11-14 13:28:00
  • Multiple Updates
2014-11-08 13:31:48
  • Multiple Updates
2014-11-05 13:27:53
  • Multiple Updates
2014-10-20 13:24:56
  • Multiple Updates
2014-09-30 05:28:24
  • Multiple Updates
2014-09-29 00:24:58
  • First insertion