CVE:CVE-2014-3144
CNNVD:CNNVD-201405-206
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。
Linux kernel 3.14.3及之前版本存在输入验证错误漏洞，该漏洞源于程序没有检查长度值。本地攻击者可通过特制的BPF指令利用该漏洞造成拒绝服务（整数下溢和系统崩溃）。
solution:Upgrade linux linux_kernel to a higher version than 3.14.3,and avoid the version (,3.14.3]; Upgrade debian debian_linux to a higher version than 7.0,and avoid the version 7.0; Upgrade canonical ubuntu_linux to a higher version than 10.04,12.04,13.10,and avoid the version 10.04,12.04,13.10; Upgrade oracle linux to a higher version than 6,7,and avoid the version 6,7