CVE-2014-2309: linux linux_kernel
Vulnerability summary
CVE-2014-2309 is a medium (CVSS 6.1) vulnerability in linux linux_kernel. EPSS estimates a 2.41% chance of exploitation in the next 30 days, higher than 84% of scored vulnerabilities. 1 public exploit is recorded.
Not severe (CVSS 6.1, adjacent network); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 1Timeline
- 11-03-2014PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
The ip6_route_add function in net/ipv6/route.c in the Linux kernel through 3.13.6 does not properly count the addition of routes, which allows remote attackers to cause a denial of service (memory consumption) via a flood of ICMPv6 Router Advertisement packets.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
2.41%
Chance of exploitation in the next 30 days
Percentile
84%
Versus all other CVEs
30-day change
No change 0.00 pp
From 2.41% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
1 foundExploit Reference (git.kernel.org)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Known conditions: adjacent network, no authentication (CVSS vector). Other conditions: not stated in public data.
Ubuntu10 products
- linux< 3.13.0-18.38 | < 4.2.0-16.19
- linux-aws< 4.4.0-1002.2 | < 4.4.0-1001.10
- linux-gke< 4.4.0-1003.3
- linux-hwe< 4.8.0-36.36~16.04.1
- linux-lts-utopic< 3.16.0-25.33~14.04.2
Debian1 product
- linux< 3.13.6-1
Linux1 product
- linux_kernel≤ 3.13.6
Opensuse1 product
- opensuseEOL11.4
Suse1 product
- linux_enterprise_server11 | 11:sp2
5 vendors · 14 products
References
16 links- lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
