Skip to main content

Mondoo Vulnerability Intelligence

Curated by Mondoo Research, enhanced with AI

Resources

Search Vulnerabilities
Trending CVEs
Browse Ecosystems
Terminology
Blog

Open Source

cnquery
cnspec

Star us on GitHub!

Company

Mondoo Platform
About
Contact

© 2026 Mondoo, Inc.

Privacy Policy Terms of Service Imprint

Vulnerability Intelligence

Vulnerability IntelligenceCVE-2014-4943

CVE-2014-4943

UNKNOWN

The PPPoL2TP feature in net/l2tp/l2tp_ppp

Published Jul 19, 2014

Modified 1 years ago

Details

The PPPoL2TP feature in net/l2tp/l2tp_ppp.c in the Linux kernel through 3.15.6 allows local users to gain privileges by leveraging data-structure differences between an l2tp socket and an inet socket.

References

WEBhttp://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=3cf521f7dc87c031617fd47e4b7aa2593c2f3daf WEBhttp://linux.oracle.com/errata/ELSA-2014-0924.html WEBhttp://linux.oracle.com/errata/ELSA-2014-3047.html WEBhttp://linux.oracle.com/errata/ELSA-2014-3048.html ADVISORYhttp://lists.opensuse.org/opensuse-security-announce/2014-10/msg00006.html ADVISORYhttp://lists.opensuse.org/opensuse-security-announce/2014-10/msg00007.html ADVISORYhttp://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html ADVISORYhttp://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html WEBhttp://openwall.com/lists/oss-security/2014/07/17/1 WEBhttp://osvdb.org/show/osvdb/109277 ADVISORYhttp://rhn.redhat.com/errata/RHSA-2014-1025.html ADVISORYhttp://secunia.com/advisories/59790 ADVISORYhttp://secunia.com/advisories/60011 ADVISORYhttp://secunia.com/advisories/60071 ADVISORYhttp://secunia.com/advisories/60220 ADVISORYhttp://secunia.com/advisories/60380 ADVISORYhttp://secunia.com/advisories/60393 ADVISORYhttp://www.debian.org/security/2014/dsa-2992 DETECTIONhttp://www.exploit-db.com/exploits/36267 WEBhttp://www.securitytracker.com/id/1030610 WEBhttps://bugzilla.redhat.com/show_bug.cgi?id=1119458 WEBhttps://exchange.xforce.ibmcloud.com/vulnerabilities/94665 WEBhttps://github.com/torvalds/linux/commit/3cf521f7dc87c031617fd47e4b7aa2593c2f3daf ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2014-4943

CVSS Analysis

CVSS v2.0

6.9

Exploitability

Access Vector

LocalAV:L

Access Complexity

MediumAC:M

Authentication

NoneAu:N

Impact

Confidentiality

CompleteC:C

Integrity

CompleteI:C

Availability

CompleteA:C

6.9/AV:L/AC:M/Au:N/C:C/I:C/A:C

Ecosystems

Timeline

PublishedJul 19, 2014

ModifiedAug 6, 2024

CVE-2014-4943 | Mondoo Vulnerability Intelligence