CVE-2014-4943

The PPPoL2TP feature in net/l2tp/l2tp_ppp.c in the Linux kernel through 3.15.6 allows local users to gain privileges by leveraging data-structure differences between an l2tp socket and an inet socket.

CVSS v2.0

6.9 MEDIUMAV:L/AC:M/Au:N/C:C/I:C/A:C

EPSS

2.10% chance of exploitation in the next 30 days, 80th percentile

Published

2014-07-19

Updated

2024-08-06

Proof-of-concept exploits (1)

• http://www.exploit-db.com/exploits/36267

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/36267

References

• CVE Record
• NVD entry

Related

• CVE-2014-4942
• CVE-2014-4944
• CVE-2014-4941
• CVE-2014-4959
• CVE-2014-4940
• CVE-2014-4960