Information disclosure in Linux Kernel
CVE-2014-8709
The ieee80211_fragment function in net/mac80211/tx.c in the Linux kernel before 3.13.5 does not properly maintain a certain tail pointer, which allows remote attackers to obtain sensitive cleartext information by reading packets.
Vulnerability class: Information Disclosure
EPSS: 0.045 (90.5th percentile) — read the EPSS interpretation.
Affected products
- Linux Linux_kernel — versions 3.13, 3.13.1, 3.13.2
- N/a — versions n/a
Weakness classification (CWE)
References
- security@opentext.com (vdb-entry, x_refsource_SECTRACK)
- security@opentext.com (vendor-advisory, x_refsource_SUSE)
- security@opentext.com (x_refsource_CONFIRM)
- security@opentext.com (x_refsource_REDHAT, vendor-advisory)
- security@opentext.com (x_refsource_CONFIRM)
- security@opentext.com (vendor-advisory, x_refsource_SUSE)
- security@opentext.com (vendor-advisory, x_refsource_SUSE)
- security@opentext.com (mailing-list, x_refsource_MLIST)
- security@opentext.com (vdb-entry, x_refsource_XF)
- security@opentext.com (x_refsource_REDHAT, vendor-advisory)