CVE-2014-9715

Source
https://nvd.nist.gov/vuln/detail/CVE-2014-9715
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2014-9715.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2014-9715
Downstream
Published
2015-05-27T10:59:02Z
Modified
2025-08-09T20:01:26Z
Summary
[none]
Details

include/net/netfilter/nfconntrackextend.h in the netfilter subsystem in the Linux kernel before 3.14.5 uses an insufficiently large data type for certain extension data, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) via outbound network traffic that triggers extension loading, as demonstrated by configuring a PPTP tunnel in a NAT environment.

References

Affected packages