CVEvulnerability
CVE-2014-1690
2.6 LOW
Official page ↗
- Status
- Modified
- Published
- 2014-02-28
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.6 LOW — AV:N/AC:H/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
The help function in net/netfilter/nf_nat_irc.c in the Linux kernel before 3.12.8 allows remote attackers to obtain sensitive information from kernel memory by establishing an IRC DCC session in which incorrect packet data is transmitted during use of the NAT mangle feature.
Affected configurations
• linux linux kernel (< 3.12.8)
• canonical ubuntu linux 12.04
• canonical ubuntu linux 13.10
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=2690d97ade05c5325cbf7c72b94b90d265659886 git.kernel.org
- http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.12.8 Mailing List, Patch, Vendor Advisory
- http://www.openwall.com/lists/oss-security/2014/01/28/3 Mailing List, Patch, Third Party Advisory
- http://www.ubuntu.com/usn/USN-2137-1 Third Party Advisory
- http://www.ubuntu.com/usn/USN-2140-1 Third Party Advisory
- http://www.ubuntu.com/usn/USN-2158-1 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1058748 Issue Tracking, Patch, Third Party Advisory
- https://github.com/torvalds/linux/commit/2690d97ade05c5325cbf7c72b94b90d265659886 Exploit, Patch, Third Party Advisory
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=2690d97ade05c5325cbf7c72b94b90d265659886 git.kernel.org
- http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.12.8 Mailing List, Patch, Vendor Advisory
- http://www.openwall.com/lists/oss-security/2014/01/28/3 Mailing List, Patch, Third Party Advisory
- http://www.ubuntu.com/usn/USN-2137-1 Third Party Advisory
- http://www.ubuntu.com/usn/USN-2140-1 Third Party Advisory
- http://www.ubuntu.com/usn/USN-2158-1 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1058748 Issue Tracking, Patch, Third Party Advisory
- https://github.com/torvalds/linux/commit/2690d97ade05c5325cbf7c72b94b90d265659886 Exploit, Patch, Third Party Advisory