CVE-2014-4943 : The PPPoL2TP feature in net/l2tp/l2tp_ppp.c in the Linux kernel through 3.15.6 a

The PPPoL2TP feature in net/l2tp/l2tp_ppp.c in the Linux kernel through 3.15.6 allows local users to gain privileges by leveraging data-structure differences between an l2tp socket and an inet socket.

Published 2014-07-19 19:55:08

Updated 2024-01-19 17:50:47

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2014-4943

Debian » Debian Linux » Version: 7.0
cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
Matching versions
Redhat » Enterprise Linux Server Aus » Version: 6.2
cpe:2.3:o:redhat:enterprise_linux_server_aus:6.2:*:*:*:*:*:*:*
Matching versions
Linux » Linux Kernel
Versions from including (>=) 3.3 and before (<) 3.4.102
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Matching versions
Linux » Linux Kernel
Versions from including (>=) 3.5 and before (<) 3.10.52
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Matching versions
Linux » Linux Kernel
Versions from including (>=) 3.15 and before (<) 3.15.9
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Matching versions
Linux » Linux Kernel
Versions from including (>=) 3.13 and before (<) 3.14.16
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Matching versions
Linux » Linux Kernel
Versions from including (>=) 3.11 and before (<) 3.12.27
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Matching versions
Linux » Linux Kernel
Versions from including (>=) 2.6.23 and before (<) 3.2.62
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Matching versions
Suse » Linux Enterprise Desktop » Version: 11 Update SP3
cpe:2.3:o:suse:linux_enterprise_desktop:11:sp3:*:*:*:*:*:*
Matching versions
Suse » Linux Enterprise Server » Version: 11 Update SP3
cpe:2.3:o:suse:linux_enterprise_server:11:sp3:*:*:*:*:*:*
Matching versions
Suse » Linux Enterprise Server » Version: 11 Update SP3 For Vmware
cpe:2.3:o:suse:linux_enterprise_server:11:sp3:*:*:*:vmware:*:*
Matching versions
Suse » Linux Enterprise Server » Version: 11 Update SP2 Ltss Edition
cpe:2.3:o:suse:linux_enterprise_server:11:sp2:*:*:ltss:*:*:*
Matching versions
Opensuse » Opensuse » Version: 11.4
cpe:2.3:o:opensuse:opensuse:11.4:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2014-4943

EPSS FAQ

0.05%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 23 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2014-4943

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
6.9	MEDIUM	AV:L/AC:M/Au:N/C:C/I:C/A:C	3.4	10.0	NIST
Access Vector: Local Access Complexity: Medium Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete

CWE ids for CVE-2014-4943

CWE-269 Improper Privilege Management

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2014-4943

http://openwall.com/lists/oss-security/2014/07/17/1

oss-security - CVE-2014-4943: Linux privilege escalation in ppp over l2tp sockets
Mailing List;Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html

[security-announce] SUSE-SU-2015:0481-1: important: Security update for
Mailing List;Third Party Advisory

CVEs referencing this url
http://secunia.com/advisories/60071

Sign in
Third Party Advisory
http://www.debian.org/security/2014/dsa-2992

Debian -- Security Information -- DSA-2992-1 linux
Third Party Advisory

CVEs referencing this url
http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html

[security-announce] openSUSE-SU-2015:0566-1: important: kernel update fo
Mailing List;Third Party Advisory

CVEs referencing this url
https://github.com/torvalds/linux/commit/3cf521f7dc87c031617fd47e4b7aa2593c2f3daf

net/l2tp: don't fall back on UDP [get|set]sockopt · torvalds/linux@3cf521f · GitHub
Patch;Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00006.html

[security-announce] SUSE-SU-2014:1316-1: important: Security update for
Mailing List;Third Party Advisory

CVEs referencing this url
http://secunia.com/advisories/60393

Sign in
Third Party Advisory

CVEs referencing this url
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=3cf521f7dc87c031617fd47e4b7aa2593c2f3daf

Broken Link;Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/94665

Linux Kernel PPP privilege escalation CVE-2014-4943 Vulnerability Report
Third Party Advisory;VDB Entry
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=3cf521f7dc87c031617fd47e4b7aa2593c2f3daf

kernel/git/torvalds/linux.git - Linux kernel source tree
Patch;Vendor Advisory
http://rhn.redhat.com/errata/RHSA-2014-1025.html

RHSA-2014:1025 - Security Advisory - Red Hat Customer Portal
Third Party Advisory
http://linux.oracle.com/errata/ELSA-2014-0924.html

linux.oracle.com | ELSA-2014-0924
Third Party Advisory

CVEs referencing this url
http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00007.html

[security-announce] SUSE-SU-2014:1319-1: important: Security update for
Mailing List;Third Party Advisory

CVEs referencing this url
http://www.exploit-db.com/exploits/36267

Linux Kernel 3.15.6 - PPP-over-L2TP Socket Level Handling Crash (PoC) - Linux dos Exploit
Third Party Advisory;VDB Entry
http://secunia.com/advisories/60220

Sign in
Third Party Advisory

CVEs referencing this url
http://osvdb.org/show/osvdb/109277

Broken Link
http://secunia.com/advisories/60380

Sign in
Third Party Advisory

CVEs referencing this url
https://bugzilla.redhat.com/show_bug.cgi?id=1119458

1119458 – (CVE-2014-4943) CVE-2014-4943 kernel: net: pppol2tp: level handling in pppol2tp_[s,g]etsockopt()
Issue Tracking;Third Party Advisory
http://linux.oracle.com/errata/ELSA-2014-3048.html

linux.oracle.com | ELSA-2014-3048
Third Party Advisory

CVEs referencing this url
http://secunia.com/advisories/60011

Sign in
Third Party Advisory

CVEs referencing this url
http://secunia.com/advisories/59790

Sign in
Third Party Advisory

CVEs referencing this url
http://www.securitytracker.com/id/1030610

Linux Kernel Flaw in PPP over L2TP Sockets Lets Local Users Gain Elevated Privileges - SecurityTracker
Third Party Advisory;VDB Entry
http://linux.oracle.com/errata/ELSA-2014-3047.html

linux.oracle.com | ELSA-2014-3047
Third Party Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2014-4943

Products affected by CVE-2014-4943

Exploit prediction scoring system (EPSS) score for CVE-2014-4943

CVSS scores for CVE-2014-4943

CWE ids for CVE-2014-4943

References for CVE-2014-4943