Skip to content
CVE Tracker
Back

CVE-2014-3145

The BPF_S_ANC_NLATTR_NEST extension implementation in the sk_run_filter function in net/core/filter.c in the Linux kernel through 3.14.3…

Medium4.9EPSS 0.65%
Published
Updated
Reserved
Assigned by
redhat

Description

The BPF_S_ANC_NLATTR_NEST extension implementation in the sk_run_filter function in net/core/filter.c in the Linux kernel through 3.14.3 uses the reverse order in a certain subtraction, which allows local users to cause a denial of service (over-read and system crash) via crafted BPF instructions. NOTE: the affected code was moved to the __skb_get_nlattr_nest function before the vulnerability was announced.

Scores

CVSS scores of CVE-2014-3145, by who scored it
Scored byCVSSScoreVector
NVDNVD · Modified2.0Medium4.9AV:L/AC:L/Au:N/C:N/I:N/A:C
EPSS (exploitation in 30 days)
0.65% · top 49% of all CVEs (2 Nov 2026)

Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 4.9.

Weakness

Affected products

  • n/a

    • affected n/a

References (19)

Sources

The same CVE in the primary databases and aggregators, to check against.

Record last updated .