CVE-2014-2523
HighSummary
In the Linux kernel up to version 3.13.6, there is a flaw in net/netfilter/nf_conntrack_proto_dccp.c that incorrectly uses a DCCP header pointer. This can lead to a system crash or potentially allow arbitrary code execution via a malicious DCCP packet.
Risk Assessment
Remote attackers may cause a denial of service or gain the ability to execute arbitrary code, posing a serious security threat to the organization.
Recommendation
It is recommended to update the Linux kernel to version 3.13.7 or later to mitigate this vulnerability.
Other vulnerabilities in Linux kernel (versions up to 3.13.6)
Original NVD description (English source)
net/netfilter/nf_conntrack_proto_dccp.c in the Linux kernel through 3.13.6 uses a DCCP header pointer incorrectly, which allows remote attackers to cause a denial of service (system crash) or possibly execute arbitrary code via a DCCP packet that triggers a call to the (1) dccp_new, (2) dccp_packet, or (3) dccp_error function.