AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2014-3145

MEDIUM · CVSS 4.9 EPSS 0.65% Public Exploit

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2014-05-11 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

GitHub PoC Links
github.com ↗

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2014-3145
Severity
MEDIUM
CVSS
4.9
EPSS
0.65%
Linux

Original NVD Description

The BPF_S_ANC_NLATTR_NEST extension implementation in the sk_run_filter function in net/core/filter.c in the Linux kernel through 3.14.3 uses the reverse order in a certain subtraction, which allows local users to cause a denial of service (over-read and system crash) via crafted BPF instructions. NOTE: the affected code was moved to the __skb_get_nlattr_nest function before the vulnerability was announced.