CVE-2014-2309
Fixed in a distro release EPSS 2%
The ip6_route_add function in net/ipv6/route.c in the Linux kernel through 3.13.6 does not properly count the addition of routes, which allows remote attackers to cause a denial of service (memory consumption) via a flood of ICMPv6 Router Advertisement packets.
Products: linux_kernel, opensuse, suse linux_enterprise_server
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | linux | 3.13.6-1 |
| Debian 13 | linux | 3.13.6-1 |
| Debian 14 | linux | 3.13.6-1 |
| Red Hat enterprise mrg 2 server el6 | kernel-rt | 0:3.10.33-rt32.33.el6rt |
| Red Hat enterprise mrg 2 server el6 | kernel-rt-debug | 0:3.10.33-rt32.33.el6rt |
| Red Hat enterprise mrg 2 server el6 | kernel-rt-debug-debuginfo | 0:3.10.33-rt32.33.el6rt |
| Red Hat enterprise mrg 2 server el6 | kernel-rt-debug-devel | 0:3.10.33-rt32.33.el6rt |
| Red Hat enterprise mrg 2 server el6 | kernel-rt-debuginfo | 0:3.10.33-rt32.33.el6rt |
| Red Hat enterprise mrg 2 server el6 | kernel-rt-debuginfo-common-x86_64 | 0:3.10.33-rt32.33.el6rt |
| Red Hat enterprise mrg 2 server el6 | kernel-rt-devel | 0:3.10.33-rt32.33.el6rt |
| Red Hat enterprise mrg 2 server el6 | kernel-rt-doc | 0:3.10.33-rt32.33.el6rt |
| Red Hat enterprise mrg 2 server el6 | kernel-rt-firmware | 0:3.10.33-rt32.33.el6rt |
| Red Hat enterprise mrg 2 server el6 | kernel-rt-trace | 0:3.10.33-rt32.33.el6rt |
| Red Hat enterprise mrg 2 server el6 | kernel-rt-trace-debuginfo | 0:3.10.33-rt32.33.el6rt |
| Red Hat enterprise mrg 2 server el6 | kernel-rt-trace-devel | 0:3.10.33-rt32.33.el6rt |
| Red Hat enterprise mrg 2 server el6 | kernel-rt-vanilla | 0:3.10.33-rt32.33.el6rt |
| Red Hat enterprise mrg 2 server el6 | kernel-rt-vanilla-debuginfo | 0:3.10.33-rt32.33.el6rt |
| Red Hat enterprise mrg 2 server el6 | kernel-rt-vanilla-devel | 0:3.10.33-rt32.33.el6rt |