1. Home
  2. Vulnerabilities
  3. CVE-2014-2706

CVE-2014-2706

CVSS v2.0 7.1 (High)
71% Progress
EPSS 2.81 % (91th)
2.81% Progress
Affected Products 5
Advisories 16
Info CVSS EPSS CAPEC Affected Configurations References Security Advisories Packages & Software OVAL Tools, Exploits & PoC Graph Web & Social Timeline

Race condition in the mac80211 subsystem in the Linux kernel before 3.13.7 allows remote attackers to cause a denial of service (system crash) via network traffic that improperly interacts with the WLAN_STA_PS_STA state (aka power-save mode), related to sta_info.c and tx.c.

Weaknesses
CWE-362
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE Status
PUBLISHED
CNA
MITRE
Published Date
2014-04-14 23:55:07
(10 years ago)
Updated Date
2023-11-07 02:19:36
(10 months ago)

Affected Products

Linux

Oracle

Suse

Configuration #1

    CPE23 From Up To
  Linux Kernel prior 3.2.56 version cpe:2.3:o:linux:linux_kernel < 3.2.56
  Linux Kernel from 3.3 version and prior 3.4.84 version cpe:2.3:o:linux:linux_kernel >= 3.3 < 3.4.84
  Linux Kernel from 3.5 version and prior 3.10.34 version cpe:2.3:o:linux:linux_kernel >= 3.5 < 3.10.34
  Linux Kernel from 3.11 version and prior 3.12.15 version cpe:2.3:o:linux:linux_kernel >= 3.11 < 3.12.15
  Linux Kernel from 3.13 version and prior 3.13.7 version cpe:2.3:o:linux:linux_kernel >= 3.13 < 3.13.7

Configuration #2

    CPE23 From Up To
  Oracle Linux 6 cpe:2.3:o:oracle:linux:6:-
  Oracle Linux 7 cpe:2.3:o:oracle:linux:7:-

Configuration #3

    CPE23 From Up To
  Suse Linux Enterprise High Availability Extension 11 SP3 cpe:2.3:o:suse:linux_enterprise_high_availability_extension:11:sp3
  Suse Linux Enterprise Desktop 11 SP3 For cpe:2.3:o:suse:suse_linux_enterprise_desktop:11:sp3:*:*:*:-
  Suse Linux Enterprise Server 11 SP3 For cpe:2.3:o:suse:suse_linux_enterprise_server:11:sp3:*:*:*:-
  Suse Linux Enterprise Server 11 SP3 for Vmware cpe:2.3:o:suse:suse_linux_enterprise_server:11:sp3:*:*:*:vmware