Vulnerability-Lookup

RHSA-2014:0786

Vulnerability from csaf_opensuse - Published: 2014-06-24 00:00 - Updated: 2026-09-20 10:52

Summary

security update for kernel

Severity

Important

Notes

Title of the patch: security update for kernel

Description of the patch: This security update provides a functional equivalent of RHSA-2014:0786. The original Red Hat(R) advisory is available from the Red Hat web site at https://access.redhat.com/errata/RHSA-2014:0786.

Patchnames: RHSA-2014:0786

CVE-2014-0206

Affected products

Recommended 12 products

Product	Version	Remediation
Unresolved product id: SUSE Liberty Linux 7:kernel-0:3.10.0-123.4.2.el7.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-123.4.2.el7.noarch	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:kernel-debug-0:3.10.0-123.4.2.el7.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-123.4.2.el7.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:kernel-devel-0:3.10.0-123.4.2.el7.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:kernel-doc-0:3.10.0-123.4.2.el7.noarch	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:kernel-headers-0:3.10.0-123.4.2.el7.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:kernel-tools-0:3.10.0-123.4.2.el7.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-123.4.2.el7.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-123.4.2.el7.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:perf-0:3.10.0-123.4.2.el7.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:python-perf-0:3.10.0-123.4.2.el7.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2014-1737

Affected products

Recommended 12 products, the same list as for CVE-2014-0206

Threats

Impact moderate

CVE-2014-1738

Affected products

Recommended 12 products, the same list as for CVE-2014-0206

Threats

Impact moderate

CVE-2014-2568

Affected products

Recommended 12 products, the same list as for CVE-2014-0206

Threats

Impact low

CVE-2014-2851

Affected products

Recommended 12 products, the same list as for CVE-2014-0206

Threats

Impact moderate

CVE-2014-3144

Affected products

Recommended 12 products, the same list as for CVE-2014-0206

Threats

Impact moderate

CVE-2014-3145

Affected products

Recommended 12 products, the same list as for CVE-2014-0206

Threats

Impact moderate

CVE-2014-3153

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 12 products, the same list as for CVE-2014-0206

Threats

Impact important

References

35 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/r…	self
https://www.suse.com/security/cve/CVE-2014-0206/	self
https://www.suse.com/security/cve/CVE-2014-1737/	self
https://www.suse.com/security/cve/CVE-2014-1738/	self
https://www.suse.com/security/cve/CVE-2014-2568/	self
https://www.suse.com/security/cve/CVE-2014-2851/	self
https://www.suse.com/security/cve/CVE-2014-3144/	self
https://www.suse.com/security/cve/CVE-2014-3145/	self
https://www.suse.com/security/cve/CVE-2014-3153/	self
https://www.suse.com/security/cve/CVE-2014-0206	external
https://bugzilla.suse.com/884324	external
https://www.suse.com/security/cve/CVE-2014-1737	external
https://bugzilla.suse.com/1115893	external
https://bugzilla.suse.com/875798	external
https://bugzilla.suse.com/877345	external
https://www.suse.com/security/cve/CVE-2014-1738	external
https://bugzilla.suse.com/875798	external
https://bugzilla.suse.com/877345	external
https://www.suse.com/security/cve/CVE-2014-2568	external
https://bugzilla.suse.com/869564	external
https://www.suse.com/security/cve/CVE-2014-2851	external
https://bugzilla.suse.com/824295	external
https://bugzilla.suse.com/873374	external
https://www.suse.com/security/cve/CVE-2014-3144	external
https://bugzilla.suse.com/824295	external
https://bugzilla.suse.com/877257	external
https://bugzilla.suse.com/889071	external
https://www.suse.com/security/cve/CVE-2014-3145	external
https://bugzilla.suse.com/824295	external
https://bugzilla.suse.com/877257	external
https://www.suse.com/security/cve/CVE-2014-3153	external
https://bugzilla.suse.com/877775	external
https://bugzilla.suse.com/880892	external
https://bugzilla.suse.com/882228	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "security update for kernel",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This security update provides a functional equivalent of RHSA-2014:0786.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2014:0786.\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "RHSA-2014:0786",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2014_0786.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2014-0206 page",
        "url": "https://www.suse.com/security/cve/CVE-2014-0206/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2014-1737 page",
        "url": "https://www.suse.com/security/cve/CVE-2014-1737/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2014-1738 page",
        "url": "https://www.suse.com/security/cve/CVE-2014-1738/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2014-2568 page",
        "url": "https://www.suse.com/security/cve/CVE-2014-2568/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2014-2851 page",
        "url": "https://www.suse.com/security/cve/CVE-2014-2851/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2014-3144 page",
        "url": "https://www.suse.com/security/cve/CVE-2014-3144/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2014-3145 page",
        "url": "https://www.suse.com/security/cve/CVE-2014-3145/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2014-3153 page",
        "url": "https://www.suse.com/security/cve/CVE-2014-3153/"
      }
    ],
    "title": "security update for kernel",
    "tracking": {
      "current_release_date": "2026-09-20T10:52:49Z",
      "generator": {
        "date": "2014-06-24T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "RHSA-2014:0786",
      "initial_release_date": "2014-06-24T00:00:00Z",
      "revision_history": [
        {
          "date": "2014-06-24T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-09-20T10:52:49Z",
          "number": "2",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-abi-whitelists-0:3.10.0-123.4.2.el7.noarch",
                "product": {
                  "name": "kernel-abi-whitelists-0:3.10.0-123.4.2.el7.noarch",
                  "product_id": "kernel-abi-whitelists-0:3.10.0-123.4.2.el7.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-abi-whitelists@3.10.0-123.4.2.el7?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-doc-0:3.10.0-123.4.2.el7.noarch",
                "product": {
                  "name": "kernel-doc-0:3.10.0-123.4.2.el7.noarch",
                  "product_id": "kernel-doc-0:3.10.0-123.4.2.el7.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-doc@3.10.0-123.4.2.el7?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-0:3.10.0-123.4.2.el7.x86_64",
                "product": {
                  "name": "kernel-0:3.10.0-123.4.2.el7.x86_64",
                  "product_id": "kernel-0:3.10.0-123.4.2.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel@3.10.0-123.4.2.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-debug-0:3.10.0-123.4.2.el7.x86_64",
                "product": {
                  "name": "kernel-debug-0:3.10.0-123.4.2.el7.x86_64",
                  "product_id": "kernel-debug-0:3.10.0-123.4.2.el7.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:linux:linux_kernel:3.10.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-debug@3.10.0-123.4.2.el7?arch=x86_64\u0026upstream=kernel-debug-0:3.10.0-123.4.2.el7.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-debug-devel-0:3.10.0-123.4.2.el7.x86_64",
                "product": {
                  "name": "kernel-debug-devel-0:3.10.0-123.4.2.el7.x86_64",
                  "product_id": "kernel-debug-devel-0:3.10.0-123.4.2.el7.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:linux:linux_kernel:3.10.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-debug-devel@3.10.0-123.4.2.el7?arch=x86_64\u0026upstream=kernel-debug-0:3.10.0-123.4.2.el7.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-devel-0:3.10.0-123.4.2.el7.x86_64",
                "product": {
                  "name": "kernel-devel-0:3.10.0-123.4.2.el7.x86_64",
                  "product_id": "kernel-devel-0:3.10.0-123.4.2.el7.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:3.10.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-devel@3.10.0-123.4.2.el7?arch=x86_64\u0026upstream=kernel-source-0:3.10.0-123.4.2.el7.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-headers-0:3.10.0-123.4.2.el7.x86_64",
                "product": {
                  "name": "kernel-headers-0:3.10.0-123.4.2.el7.x86_64",
                  "product_id": "kernel-headers-0:3.10.0-123.4.2.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-headers@3.10.0-123.4.2.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-tools-0:3.10.0-123.4.2.el7.x86_64",
                "product": {
                  "name": "kernel-tools-0:3.10.0-123.4.2.el7.x86_64",
                  "product_id": "kernel-tools-0:3.10.0-123.4.2.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-tools@3.10.0-123.4.2.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-tools-libs-0:3.10.0-123.4.2.el7.x86_64",
                "product": {
                  "name": "kernel-tools-libs-0:3.10.0-123.4.2.el7.x86_64",
                  "product_id": "kernel-tools-libs-0:3.10.0-123.4.2.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-tools-libs@3.10.0-123.4.2.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-tools-libs-devel-0:3.10.0-123.4.2.el7.x86_64",
                "product": {
                  "name": "kernel-tools-libs-devel-0:3.10.0-123.4.2.el7.x86_64",
                  "product_id": "kernel-tools-libs-devel-0:3.10.0-123.4.2.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-tools-libs-devel@3.10.0-123.4.2.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "perf-0:3.10.0-123.4.2.el7.x86_64",
                "product": {
                  "name": "perf-0:3.10.0-123.4.2.el7.x86_64",
                  "product_id": "perf-0:3.10.0-123.4.2.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/perf@3.10.0-123.4.2.el7?arch=x86_64\u0026upstream=perf-0:3.10.0-123.4.2.el7.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python-perf-0:3.10.0-123.4.2.el7.x86_64",
                "product": {
                  "name": "python-perf-0:3.10.0-123.4.2.el7.x86_64",
                  "product_id": "python-perf-0:3.10.0-123.4.2.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/python-perf@3.10.0-123.4.2.el7?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Liberty Linux 7",
                "product": {
                  "name": "SUSE Liberty Linux 7",
                  "product_id": "SUSE Liberty Linux 7",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sll:7"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-0:3.10.0-123.4.2.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:kernel-0:3.10.0-123.4.2.el7.x86_64"
        },
        "product_reference": "kernel-0:3.10.0-123.4.2.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-abi-whitelists-0:3.10.0-123.4.2.el7.noarch as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-123.4.2.el7.noarch"
        },
        "product_reference": "kernel-abi-whitelists-0:3.10.0-123.4.2.el7.noarch",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-0:3.10.0-123.4.2.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-123.4.2.el7.x86_64"
        },
        "product_reference": "kernel-debug-0:3.10.0-123.4.2.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-devel-0:3.10.0-123.4.2.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-123.4.2.el7.x86_64"
        },
        "product_reference": "kernel-debug-devel-0:3.10.0-123.4.2.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-devel-0:3.10.0-123.4.2.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-123.4.2.el7.x86_64"
        },
        "product_reference": "kernel-devel-0:3.10.0-123.4.2.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-doc-0:3.10.0-123.4.2.el7.noarch as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-123.4.2.el7.noarch"
        },
        "product_reference": "kernel-doc-0:3.10.0-123.4.2.el7.noarch",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-headers-0:3.10.0-123.4.2.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-123.4.2.el7.x86_64"
        },
        "product_reference": "kernel-headers-0:3.10.0-123.4.2.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-tools-0:3.10.0-123.4.2.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-123.4.2.el7.x86_64"
        },
        "product_reference": "kernel-tools-0:3.10.0-123.4.2.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-tools-libs-0:3.10.0-123.4.2.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-123.4.2.el7.x86_64"
        },
        "product_reference": "kernel-tools-libs-0:3.10.0-123.4.2.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-tools-libs-devel-0:3.10.0-123.4.2.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-123.4.2.el7.x86_64"
        },
        "product_reference": "kernel-tools-libs-devel-0:3.10.0-123.4.2.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perf-0:3.10.0-123.4.2.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:perf-0:3.10.0-123.4.2.el7.x86_64"
        },
        "product_reference": "perf-0:3.10.0-123.4.2.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-perf-0:3.10.0-123.4.2.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:python-perf-0:3.10.0-123.4.2.el7.x86_64"
        },
        "product_reference": "python-perf-0:3.10.0-123.4.2.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2014-0206",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2014-0206"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Array index error in the aio_read_events_ring function in fs/aio.c in the Linux kernel through 3.15.1 allows local users to obtain sensitive information from kernel memory via a large head value.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:kernel-0:3.10.0-123.4.2.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-123.4.2.el7.noarch",
          "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-123.4.2.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-123.4.2.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-123.4.2.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-123.4.2.el7.noarch",
          "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-123.4.2.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-123.4.2.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-123.4.2.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-123.4.2.el7.x86_64",
          "SUSE Liberty Linux 7:perf-0:3.10.0-123.4.2.el7.x86_64",
          "SUSE Liberty Linux 7:python-perf-0:3.10.0-123.4.2.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2014-0206",
          "url": "https://www.suse.com/security/cve/CVE-2014-0206"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 884324 for CVE-2014-0206",
          "url": "https://bugzilla.suse.com/884324"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:kernel-0:3.10.0-123.4.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-123.4.2.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-123.4.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-123.4.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-123.4.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-123.4.2.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-123.4.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-123.4.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-123.4.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-123.4.2.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-123.4.2.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-123.4.2.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2014-06-24T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2014-0206"
    },
    {
      "cve": "CVE-2014-1737",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2014-1737"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The raw_cmd_copyin function in drivers/block/floppy.c in the Linux kernel through 3.14.3 does not properly handle error conditions during processing of an FDRAWCMD ioctl call, which allows local users to trigger kfree operations and gain privileges by leveraging write access to a /dev/fd device.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:kernel-0:3.10.0-123.4.2.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-123.4.2.el7.noarch",
          "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-123.4.2.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-123.4.2.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-123.4.2.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-123.4.2.el7.noarch",
          "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-123.4.2.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-123.4.2.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-123.4.2.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-123.4.2.el7.x86_64",
          "SUSE Liberty Linux 7:perf-0:3.10.0-123.4.2.el7.x86_64",
          "SUSE Liberty Linux 7:python-perf-0:3.10.0-123.4.2.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2014-1737",
          "url": "https://www.suse.com/security/cve/CVE-2014-1737"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1115893 for CVE-2014-1737",
          "url": "https://bugzilla.suse.com/1115893"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 875798 for CVE-2014-1737",
          "url": "https://bugzilla.suse.com/875798"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 877345 for CVE-2014-1737",
          "url": "https://bugzilla.suse.com/877345"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:kernel-0:3.10.0-123.4.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-123.4.2.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-123.4.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-123.4.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-123.4.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-123.4.2.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-123.4.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-123.4.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-123.4.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-123.4.2.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-123.4.2.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-123.4.2.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2014-06-24T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2014-1737"
    },
    {
      "cve": "CVE-2014-1738",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2014-1738"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The raw_cmd_copyout function in drivers/block/floppy.c in the Linux kernel through 3.14.3 does not properly restrict access to certain pointers during processing of an FDRAWCMD ioctl call, which allows local users to obtain sensitive information from kernel heap memory by leveraging write access to a /dev/fd device.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:kernel-0:3.10.0-123.4.2.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-123.4.2.el7.noarch",
          "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-123.4.2.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-123.4.2.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-123.4.2.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-123.4.2.el7.noarch",
          "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-123.4.2.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-123.4.2.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-123.4.2.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-123.4.2.el7.x86_64",
          "SUSE Liberty Linux 7:perf-0:3.10.0-123.4.2.el7.x86_64",
          "SUSE Liberty Linux 7:python-perf-0:3.10.0-123.4.2.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2014-1738",
          "url": "https://www.suse.com/security/cve/CVE-2014-1738"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 875798 for CVE-2014-1738",
          "url": "https://bugzilla.suse.com/875798"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 877345 for CVE-2014-1738",
          "url": "https://bugzilla.suse.com/877345"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:kernel-0:3.10.0-123.4.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-123.4.2.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-123.4.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-123.4.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-123.4.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-123.4.2.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-123.4.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-123.4.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-123.4.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-123.4.2.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-123.4.2.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-123.4.2.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2014-06-24T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2014-1738"
    },
    {
      "cve": "CVE-2014-2568",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2014-2568"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free vulnerability in the nfqnl_zcopy function in net/netfilter/nfnetlink_queue_core.c in the Linux kernel through 3.13.6 allows attackers to obtain sensitive information from kernel memory by leveraging the absence of a certain orphaning operation. NOTE: the affected code was moved to the skb_zerocopy function in net/core/skbuff.c before the vulnerability was announced.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:kernel-0:3.10.0-123.4.2.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-123.4.2.el7.noarch",
          "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-123.4.2.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-123.4.2.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-123.4.2.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-123.4.2.el7.noarch",
          "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-123.4.2.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-123.4.2.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-123.4.2.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-123.4.2.el7.x86_64",
          "SUSE Liberty Linux 7:perf-0:3.10.0-123.4.2.el7.x86_64",
          "SUSE Liberty Linux 7:python-perf-0:3.10.0-123.4.2.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2014-2568",
          "url": "https://www.suse.com/security/cve/CVE-2014-2568"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 869564 for CVE-2014-2568",
          "url": "https://bugzilla.suse.com/869564"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:kernel-0:3.10.0-123.4.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-123.4.2.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-123.4.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-123.4.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-123.4.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-123.4.2.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-123.4.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-123.4.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-123.4.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-123.4.2.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-123.4.2.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-123.4.2.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2014-06-24T00:00:00Z",
          "details": "low"
        }
      ],
      "title": "CVE-2014-2568"
    },
    {
      "cve": "CVE-2014-2851",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2014-2851"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Integer overflow in the ping_init_sock function in net/ipv4/ping.c in the Linux kernel through 3.14.1 allows local users to cause a denial of service (use-after-free and system crash) or possibly gain privileges via a crafted application that leverages an improperly managed reference counter.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:kernel-0:3.10.0-123.4.2.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-123.4.2.el7.noarch",
          "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-123.4.2.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-123.4.2.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-123.4.2.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-123.4.2.el7.noarch",
          "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-123.4.2.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-123.4.2.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-123.4.2.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-123.4.2.el7.x86_64",
          "SUSE Liberty Linux 7:perf-0:3.10.0-123.4.2.el7.x86_64",
          "SUSE Liberty Linux 7:python-perf-0:3.10.0-123.4.2.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2014-2851",
          "url": "https://www.suse.com/security/cve/CVE-2014-2851"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 824295 for CVE-2014-2851",
          "url": "https://bugzilla.suse.com/824295"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 873374 for CVE-2014-2851",
          "url": "https://bugzilla.suse.com/873374"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:kernel-0:3.10.0-123.4.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-123.4.2.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-123.4.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-123.4.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-123.4.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-123.4.2.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-123.4.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-123.4.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-123.4.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-123.4.2.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-123.4.2.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-123.4.2.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2014-06-24T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2014-2851"
    },
    {
      "cve": "CVE-2014-3144",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2014-3144"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The (1) BPF_S_ANC_NLATTR and (2) BPF_S_ANC_NLATTR_NEST extension implementations in the sk_run_filter function in net/core/filter.c in the Linux kernel through 3.14.3 do not check whether a certain length value is sufficiently large, which allows local users to cause a denial of service (integer underflow and system crash) via crafted BPF instructions.  NOTE: the affected code was moved to the __skb_get_nlattr and __skb_get_nlattr_nest functions before the vulnerability was announced.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:kernel-0:3.10.0-123.4.2.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-123.4.2.el7.noarch",
          "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-123.4.2.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-123.4.2.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-123.4.2.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-123.4.2.el7.noarch",
          "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-123.4.2.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-123.4.2.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-123.4.2.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-123.4.2.el7.x86_64",
          "SUSE Liberty Linux 7:perf-0:3.10.0-123.4.2.el7.x86_64",
          "SUSE Liberty Linux 7:python-perf-0:3.10.0-123.4.2.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2014-3144",
          "url": "https://www.suse.com/security/cve/CVE-2014-3144"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 824295 for CVE-2014-3144",
          "url": "https://bugzilla.suse.com/824295"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 877257 for CVE-2014-3144",
          "url": "https://bugzilla.suse.com/877257"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 889071 for CVE-2014-3144",
          "url": "https://bugzilla.suse.com/889071"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:kernel-0:3.10.0-123.4.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-123.4.2.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-123.4.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-123.4.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-123.4.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-123.4.2.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-123.4.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-123.4.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-123.4.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-123.4.2.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-123.4.2.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-123.4.2.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2014-06-24T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2014-3144"
    },
    {
      "cve": "CVE-2014-3145",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2014-3145"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The BPF_S_ANC_NLATTR_NEST extension implementation in the sk_run_filter function in net/core/filter.c in the Linux kernel through 3.14.3 uses the reverse order in a certain subtraction, which allows local users to cause a denial of service (over-read and system crash) via crafted BPF instructions.  NOTE: the affected code was moved to the __skb_get_nlattr_nest function before the vulnerability was announced.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:kernel-0:3.10.0-123.4.2.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-123.4.2.el7.noarch",
          "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-123.4.2.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-123.4.2.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-123.4.2.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-123.4.2.el7.noarch",
          "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-123.4.2.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-123.4.2.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-123.4.2.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-123.4.2.el7.x86_64",
          "SUSE Liberty Linux 7:perf-0:3.10.0-123.4.2.el7.x86_64",
          "SUSE Liberty Linux 7:python-perf-0:3.10.0-123.4.2.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2014-3145",
          "url": "https://www.suse.com/security/cve/CVE-2014-3145"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 824295 for CVE-2014-3145",
          "url": "https://bugzilla.suse.com/824295"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 877257 for CVE-2014-3145",
          "url": "https://bugzilla.suse.com/877257"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:kernel-0:3.10.0-123.4.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-123.4.2.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-123.4.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-123.4.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-123.4.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-123.4.2.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-123.4.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-123.4.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-123.4.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-123.4.2.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-123.4.2.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-123.4.2.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2014-06-24T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2014-3145"
    },
    {
      "cve": "CVE-2014-3153",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2014-3153"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The futex_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not ensure that calls have two different futex addresses, which allows local users to gain privileges via a crafted FUTEX_REQUEUE command that facilitates unsafe waiter modification.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:kernel-0:3.10.0-123.4.2.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-123.4.2.el7.noarch",
          "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-123.4.2.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-123.4.2.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-123.4.2.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-123.4.2.el7.noarch",
          "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-123.4.2.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-123.4.2.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-123.4.2.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-123.4.2.el7.x86_64",
          "SUSE Liberty Linux 7:perf-0:3.10.0-123.4.2.el7.x86_64",
          "SUSE Liberty Linux 7:python-perf-0:3.10.0-123.4.2.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2014-3153",
          "url": "https://www.suse.com/security/cve/CVE-2014-3153"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 877775 for CVE-2014-3153",
          "url": "https://bugzilla.suse.com/877775"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 880892 for CVE-2014-3153",
          "url": "https://bugzilla.suse.com/880892"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 882228 for CVE-2014-3153",
          "url": "https://bugzilla.suse.com/882228"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:kernel-0:3.10.0-123.4.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-123.4.2.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-123.4.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-123.4.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-123.4.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-123.4.2.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-123.4.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-123.4.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-123.4.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-123.4.2.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-123.4.2.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-123.4.2.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 7:kernel-0:3.10.0-123.4.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-123.4.2.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-123.4.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-123.4.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-123.4.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-123.4.2.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-123.4.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-123.4.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-123.4.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-123.4.2.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-123.4.2.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-123.4.2.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2014-06-24T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2014-3153"
    }
  ]
}

CVE-2014-0206 (GCVE-0-2014-0206)

Vulnerability from cvelistv5 – Published: 2014-06-25 10:00 – Updated: 2024-08-06 09:05

Summary

Array index error in the aio_read_events_ring function in fs/aio.c in the Linux kernel through 3.15.1 allows local users to obtain sensitive information from kernel memory via a large head value.

Severity

No CVSS data available.

CWE

Assigner

redhat redhat root

References

13 references

URL	Tags
http://secunia.com/advisories/59278	third-party-advisoryx_refsource_SECUNIA
https://source.android.com/security/bulletin/2017-04-01	x_refsource_CONFIRM
https://git.kernel.org/cgit/linux/kernel/git/torv…	x_refsource_CONFIRM
http://git.kernel.org/?p=linux/kernel/git/torvald…	x_refsource_CONFIRM
http://www.securitytracker.com/id/1030479	vdb-entryx_refsource_SECTRACK
https://github.com/torvalds/linux/commit/edfbbf38…	x_refsource_CONFIRM
http://www.securityfocus.com/bid/68176	vdb-entryx_refsource_BID
https://www.kernel.org/pub/linux/kernel/v3.x/Chan…	x_refsource_CONFIRM
https://bugzilla.redhat.com/show_bug.cgi?id=1094602	x_refsource_CONFIRM
https://www.kernel.org/pub/linux/kernel/v3.x/Chan…	x_refsource_CONFIRM
https://www.kernel.org/pub/linux/kernel/v3.x/Chan…	x_refsource_CONFIRM
https://www.kernel.org/pub/linux/kernel/v3.x/Chan…	x_refsource_CONFIRM
http://www.securitytracker.com/id/1038201	vdb-entryx_refsource_SECTRACK

Date Public

2014-06-24 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T09:05:39.284Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "59278",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59278"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://source.android.com/security/bulletin/2017-04-01"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=edfbbf388f29"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=edfbbf388f293d70bf4b7c0bc38774d05e6f711a"
          },
          {
            "name": "1030479",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1030479"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/edfbbf388f293d70bf4b7c0bc38774d05e6f711a"
          },
          {
            "name": "68176",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/68176"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.10.46"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1094602"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.15.3"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.12.24"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.10"
          },
          {
            "name": "1038201",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038201"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-06-24T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Array index error in the aio_read_events_ring function in fs/aio.c in the Linux kernel through 3.15.1 allows local users to obtain sensitive information from kernel memory via a large head value."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-07-10T09:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "59278",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59278"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://source.android.com/security/bulletin/2017-04-01"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=edfbbf388f29"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=edfbbf388f293d70bf4b7c0bc38774d05e6f711a"
        },
        {
          "name": "1030479",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1030479"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/torvalds/linux/commit/edfbbf388f293d70bf4b7c0bc38774d05e6f711a"
        },
        {
          "name": "68176",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/68176"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.10.46"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1094602"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.15.3"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.12.24"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.10"
        },
        {
          "name": "1038201",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038201"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2014-0206",
    "datePublished": "2014-06-25T10:00:00.000Z",
    "dateReserved": "2013-12-03T00:00:00.000Z",
    "dateUpdated": "2024-08-06T09:05:39.284Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2014-1737 (GCVE-0-2014-1737)

Vulnerability from cvelistv5 – Published: 2014-05-11 21:00 – Updated: 2024-08-06 09:50

Summary

The raw_cmd_copyin function in drivers/block/floppy.c in the Linux kernel through 3.14.3 does not properly handle error conditions during processing of an FDRAWCMD ioctl call, which allows local users to trigger kfree operations and gain privileges by leveraging write access to a /dev/fd device.

Severity

No CVSS data available.

CWE

Assigner

Chrome Google root

References

18 references

URL	Tags
http://www.securityfocus.com/bid/67300	vdb-entryx_refsource_BID
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://secunia.com/advisories/59262	third-party-advisoryx_refsource_SECUNIA
http://git.kernel.org/?p=linux/kernel/git/torvald…	x_refsource_CONFIRM
http://secunia.com/advisories/59309	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/59406	third-party-advisoryx_refsource_SECUNIA
http://www.debian.org/security/2014/dsa-2928	vendor-advisoryx_refsource_DEBIAN
https://bugzilla.redhat.com/show_bug.cgi?id=1094299	x_refsource_CONFIRM
http://linux.oracle.com/errata/ELSA-2014-0771.html	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2014-0800.html	vendor-advisoryx_refsource_REDHAT
http://www.openwall.com/lists/oss-security/2014/05/09/2	mailing-listx_refsource_MLIST
http://secunia.com/advisories/59599	third-party-advisoryx_refsource_SECUNIA
http://www.debian.org/security/2014/dsa-2926	vendor-advisoryx_refsource_DEBIAN
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.securitytracker.com/id/1030474	vdb-entryx_refsource_SECTRACK
http://linux.oracle.com/errata/ELSA-2014-3043.html	x_refsource_CONFIRM
https://github.com/torvalds/linux/commit/ef87dbe7…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2014-0801.html	vendor-advisoryx_refsource_REDHAT

Date Public

2014-05-09 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T09:50:11.078Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "67300",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/67300"
          },
          {
            "name": "SUSE-SU-2014:0683",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00012.html"
          },
          {
            "name": "59262",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59262"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ef87dbe7614341c2e7bfe8d32fcb7028cc97442c"
          },
          {
            "name": "59309",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59309"
          },
          {
            "name": "59406",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59406"
          },
          {
            "name": "DSA-2928",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-2928"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1094299"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://linux.oracle.com/errata/ELSA-2014-0771.html"
          },
          {
            "name": "RHSA-2014:0800",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0800.html"
          },
          {
            "name": "[oss-security] 20140509 Linux kernel floppy ioctl kernel code execution",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2014/05/09/2"
          },
          {
            "name": "59599",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59599"
          },
          {
            "name": "DSA-2926",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-2926"
          },
          {
            "name": "SUSE-SU-2014:0667",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00007.html"
          },
          {
            "name": "1030474",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1030474"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://linux.oracle.com/errata/ELSA-2014-3043.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/ef87dbe7614341c2e7bfe8d32fcb7028cc97442c"
          },
          {
            "name": "RHSA-2014:0801",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0801.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-05-09T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The raw_cmd_copyin function in drivers/block/floppy.c in the Linux kernel through 3.14.3 does not properly handle error conditions during processing of an FDRAWCMD ioctl call, which allows local users to trigger kfree operations and gain privileges by leveraging write access to a /dev/fd device."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-20T19:57:01.000Z",
        "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
        "shortName": "Chrome"
      },
      "references": [
        {
          "name": "67300",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/67300"
        },
        {
          "name": "SUSE-SU-2014:0683",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00012.html"
        },
        {
          "name": "59262",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59262"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ef87dbe7614341c2e7bfe8d32fcb7028cc97442c"
        },
        {
          "name": "59309",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59309"
        },
        {
          "name": "59406",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59406"
        },
        {
          "name": "DSA-2928",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-2928"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1094299"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://linux.oracle.com/errata/ELSA-2014-0771.html"
        },
        {
          "name": "RHSA-2014:0800",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0800.html"
        },
        {
          "name": "[oss-security] 20140509 Linux kernel floppy ioctl kernel code execution",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2014/05/09/2"
        },
        {
          "name": "59599",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59599"
        },
        {
          "name": "DSA-2926",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-2926"
        },
        {
          "name": "SUSE-SU-2014:0667",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00007.html"
        },
        {
          "name": "1030474",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1030474"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://linux.oracle.com/errata/ELSA-2014-3043.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/torvalds/linux/commit/ef87dbe7614341c2e7bfe8d32fcb7028cc97442c"
        },
        {
          "name": "RHSA-2014:0801",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0801.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@google.com",
          "ID": "CVE-2014-1737",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The raw_cmd_copyin function in drivers/block/floppy.c in the Linux kernel through 3.14.3 does not properly handle error conditions during processing of an FDRAWCMD ioctl call, which allows local users to trigger kfree operations and gain privileges by leveraging write access to a /dev/fd device."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "67300",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/67300"
            },
            {
              "name": "SUSE-SU-2014:0683",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00012.html"
            },
            {
              "name": "59262",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59262"
            },
            {
              "name": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=ef87dbe7614341c2e7bfe8d32fcb7028cc97442c",
              "refsource": "CONFIRM",
              "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=ef87dbe7614341c2e7bfe8d32fcb7028cc97442c"
            },
            {
              "name": "59309",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59309"
            },
            {
              "name": "59406",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59406"
            },
            {
              "name": "DSA-2928",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2014/dsa-2928"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1094299",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1094299"
            },
            {
              "name": "http://linux.oracle.com/errata/ELSA-2014-0771.html",
              "refsource": "CONFIRM",
              "url": "http://linux.oracle.com/errata/ELSA-2014-0771.html"
            },
            {
              "name": "RHSA-2014:0800",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0800.html"
            },
            {
              "name": "[oss-security] 20140509 Linux kernel floppy ioctl kernel code execution",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2014/05/09/2"
            },
            {
              "name": "59599",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59599"
            },
            {
              "name": "DSA-2926",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2014/dsa-2926"
            },
            {
              "name": "SUSE-SU-2014:0667",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00007.html"
            },
            {
              "name": "1030474",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1030474"
            },
            {
              "name": "http://linux.oracle.com/errata/ELSA-2014-3043.html",
              "refsource": "CONFIRM",
              "url": "http://linux.oracle.com/errata/ELSA-2014-3043.html"
            },
            {
              "name": "https://github.com/torvalds/linux/commit/ef87dbe7614341c2e7bfe8d32fcb7028cc97442c",
              "refsource": "CONFIRM",
              "url": "https://github.com/torvalds/linux/commit/ef87dbe7614341c2e7bfe8d32fcb7028cc97442c"
            },
            {
              "name": "RHSA-2014:0801",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0801.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
    "assignerShortName": "Chrome",
    "cveId": "CVE-2014-1737",
    "datePublished": "2014-05-11T21:00:00.000Z",
    "dateReserved": "2014-01-29T00:00:00.000Z",
    "dateUpdated": "2024-08-06T09:50:11.078Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2014-1738 (GCVE-0-2014-1738)

Vulnerability from cvelistv5 – Published: 2014-05-11 21:00 – Updated: 2024-08-06 09:50

Summary

The raw_cmd_copyout function in drivers/block/floppy.c in the Linux kernel through 3.14.3 does not properly restrict access to certain pointers during processing of an FDRAWCMD ioctl call, which allows local users to obtain sensitive information from kernel heap memory by leveraging write access to a /dev/fd device.

Severity

No CVSS data available.

CWE

Assigner

Chrome Google root

References

18 references

URL	Tags
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.securityfocus.com/bid/67302	vdb-entryx_refsource_BID
http://secunia.com/advisories/59262	third-party-advisoryx_refsource_SECUNIA
http://git.kernel.org/?p=linux/kernel/git/torvald…	x_refsource_CONFIRM
http://secunia.com/advisories/59309	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/59406	third-party-advisoryx_refsource_SECUNIA
http://www.debian.org/security/2014/dsa-2928	vendor-advisoryx_refsource_DEBIAN
https://bugzilla.redhat.com/show_bug.cgi?id=1094299	x_refsource_CONFIRM
http://linux.oracle.com/errata/ELSA-2014-0771.html	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2014-0800.html	vendor-advisoryx_refsource_REDHAT
http://www.openwall.com/lists/oss-security/2014/05/09/2	mailing-listx_refsource_MLIST
http://secunia.com/advisories/59599	third-party-advisoryx_refsource_SECUNIA
http://www.debian.org/security/2014/dsa-2926	vendor-advisoryx_refsource_DEBIAN
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://github.com/torvalds/linux/commit/2145e15e…	x_refsource_CONFIRM
http://www.securitytracker.com/id/1030474	vdb-entryx_refsource_SECTRACK
http://linux.oracle.com/errata/ELSA-2014-3043.html	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2014-0801.html	vendor-advisoryx_refsource_REDHAT

Date Public

2014-05-09 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T09:50:11.164Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "SUSE-SU-2014:0683",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00012.html"
          },
          {
            "name": "67302",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/67302"
          },
          {
            "name": "59262",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59262"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=2145e15e0557a01b9195d1c7199a1b92cb9be81f"
          },
          {
            "name": "59309",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59309"
          },
          {
            "name": "59406",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59406"
          },
          {
            "name": "DSA-2928",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-2928"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1094299"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://linux.oracle.com/errata/ELSA-2014-0771.html"
          },
          {
            "name": "RHSA-2014:0800",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0800.html"
          },
          {
            "name": "[oss-security] 20140509 Linux kernel floppy ioctl kernel code execution",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2014/05/09/2"
          },
          {
            "name": "59599",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59599"
          },
          {
            "name": "DSA-2926",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-2926"
          },
          {
            "name": "SUSE-SU-2014:0667",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00007.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/2145e15e0557a01b9195d1c7199a1b92cb9be81f"
          },
          {
            "name": "1030474",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1030474"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://linux.oracle.com/errata/ELSA-2014-3043.html"
          },
          {
            "name": "RHSA-2014:0801",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0801.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-05-09T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The raw_cmd_copyout function in drivers/block/floppy.c in the Linux kernel through 3.14.3 does not properly restrict access to certain pointers during processing of an FDRAWCMD ioctl call, which allows local users to obtain sensitive information from kernel heap memory by leveraging write access to a /dev/fd device."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-20T19:57:01.000Z",
        "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
        "shortName": "Chrome"
      },
      "references": [
        {
          "name": "SUSE-SU-2014:0683",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00012.html"
        },
        {
          "name": "67302",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/67302"
        },
        {
          "name": "59262",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59262"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=2145e15e0557a01b9195d1c7199a1b92cb9be81f"
        },
        {
          "name": "59309",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59309"
        },
        {
          "name": "59406",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59406"
        },
        {
          "name": "DSA-2928",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-2928"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1094299"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://linux.oracle.com/errata/ELSA-2014-0771.html"
        },
        {
          "name": "RHSA-2014:0800",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0800.html"
        },
        {
          "name": "[oss-security] 20140509 Linux kernel floppy ioctl kernel code execution",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2014/05/09/2"
        },
        {
          "name": "59599",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59599"
        },
        {
          "name": "DSA-2926",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-2926"
        },
        {
          "name": "SUSE-SU-2014:0667",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00007.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/torvalds/linux/commit/2145e15e0557a01b9195d1c7199a1b92cb9be81f"
        },
        {
          "name": "1030474",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1030474"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://linux.oracle.com/errata/ELSA-2014-3043.html"
        },
        {
          "name": "RHSA-2014:0801",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0801.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@google.com",
          "ID": "CVE-2014-1738",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The raw_cmd_copyout function in drivers/block/floppy.c in the Linux kernel through 3.14.3 does not properly restrict access to certain pointers during processing of an FDRAWCMD ioctl call, which allows local users to obtain sensitive information from kernel heap memory by leveraging write access to a /dev/fd device."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "SUSE-SU-2014:0683",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00012.html"
            },
            {
              "name": "67302",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/67302"
            },
            {
              "name": "59262",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59262"
            },
            {
              "name": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=2145e15e0557a01b9195d1c7199a1b92cb9be81f",
              "refsource": "CONFIRM",
              "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=2145e15e0557a01b9195d1c7199a1b92cb9be81f"
            },
            {
              "name": "59309",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59309"
            },
            {
              "name": "59406",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59406"
            },
            {
              "name": "DSA-2928",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2014/dsa-2928"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1094299",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1094299"
            },
            {
              "name": "http://linux.oracle.com/errata/ELSA-2014-0771.html",
              "refsource": "CONFIRM",
              "url": "http://linux.oracle.com/errata/ELSA-2014-0771.html"
            },
            {
              "name": "RHSA-2014:0800",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0800.html"
            },
            {
              "name": "[oss-security] 20140509 Linux kernel floppy ioctl kernel code execution",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2014/05/09/2"
            },
            {
              "name": "59599",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59599"
            },
            {
              "name": "DSA-2926",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2014/dsa-2926"
            },
            {
              "name": "SUSE-SU-2014:0667",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00007.html"
            },
            {
              "name": "https://github.com/torvalds/linux/commit/2145e15e0557a01b9195d1c7199a1b92cb9be81f",
              "refsource": "CONFIRM",
              "url": "https://github.com/torvalds/linux/commit/2145e15e0557a01b9195d1c7199a1b92cb9be81f"
            },
            {
              "name": "1030474",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1030474"
            },
            {
              "name": "http://linux.oracle.com/errata/ELSA-2014-3043.html",
              "refsource": "CONFIRM",
              "url": "http://linux.oracle.com/errata/ELSA-2014-3043.html"
            },
            {
              "name": "RHSA-2014:0801",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0801.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
    "assignerShortName": "Chrome",
    "cveId": "CVE-2014-1738",
    "datePublished": "2014-05-11T21:00:00.000Z",
    "dateReserved": "2014-01-29T00:00:00.000Z",
    "dateUpdated": "2024-08-06T09:50:11.164Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2014-2568 (GCVE-0-2014-2568)

Vulnerability from cvelistv5 – Published: 2014-03-24 10:00 – Updated: 2024-08-06 10:21

Summary

Use-after-free vulnerability in the nfqnl_zcopy function in net/netfilter/nfnetlink_queue_core.c in the Linux kernel through 3.13.6 allows attackers to obtain sensitive information from kernel memory by leveraging the absence of a certain orphaning operation. NOTE: the affected code was moved to the skb_zerocopy function in net/core/skbuff.c before the vulnerability was announced.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

8 references

URL	Tags
https://lkml.org/lkml/2014/3/20/421	mailing-listx_refsource_MLIST
https://bugzilla.redhat.com/show_bug.cgi?id=1079012	x_refsource_CONFIRM
http://www.ubuntu.com/usn/USN-2240-1	vendor-advisoryx_refsource_UBUNTU
http://www.securityfocus.com/bid/66348	vdb-entryx_refsource_BID
http://secunia.com/advisories/59599	third-party-advisoryx_refsource_SECUNIA
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
http://seclists.org/oss-sec/2014/q1/627	mailing-listx_refsource_MLIST
http://www.openwall.com/lists/oss-security/2014/0…	mailing-listx_refsource_MLIST

Date Public

2014-03-20 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T10:21:35.474Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[linux-kernel] 20140320 [PATCH v3] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lkml.org/lkml/2014/3/20/421"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1079012"
          },
          {
            "name": "USN-2240-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2240-1"
          },
          {
            "name": "66348",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/66348"
          },
          {
            "name": "59599",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59599"
          },
          {
            "name": "linux-kernel-cve20142568-info-disclosure(91922)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/91922"
          },
          {
            "name": "[oss-sec] 20140320 CVE request -- kernel: net: potential information leak when ubuf backed skbs are skb_zerocopy()ied",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://seclists.org/oss-sec/2014/q1/627"
          },
          {
            "name": "[oss-security] 20140320 Re: CVE request -- kernel: net: potential information leak when ubuf backed skbs are skb_zerocopy()ied",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2014/03/20/16"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-03-20T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Use-after-free vulnerability in the nfqnl_zcopy function in net/netfilter/nfnetlink_queue_core.c in the Linux kernel through 3.13.6 allows attackers to obtain sensitive information from kernel memory by leveraging the absence of a certain orphaning operation. NOTE: the affected code was moved to the skb_zerocopy function in net/core/skbuff.c before the vulnerability was announced."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-28T19:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "[linux-kernel] 20140320 [PATCH v3] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lkml.org/lkml/2014/3/20/421"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1079012"
        },
        {
          "name": "USN-2240-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2240-1"
        },
        {
          "name": "66348",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/66348"
        },
        {
          "name": "59599",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59599"
        },
        {
          "name": "linux-kernel-cve20142568-info-disclosure(91922)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/91922"
        },
        {
          "name": "[oss-sec] 20140320 CVE request -- kernel: net: potential information leak when ubuf backed skbs are skb_zerocopy()ied",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://seclists.org/oss-sec/2014/q1/627"
        },
        {
          "name": "[oss-security] 20140320 Re: CVE request -- kernel: net: potential information leak when ubuf backed skbs are skb_zerocopy()ied",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2014/03/20/16"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2014-2568",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Use-after-free vulnerability in the nfqnl_zcopy function in net/netfilter/nfnetlink_queue_core.c in the Linux kernel through 3.13.6 allows attackers to obtain sensitive information from kernel memory by leveraging the absence of a certain orphaning operation. NOTE: the affected code was moved to the skb_zerocopy function in net/core/skbuff.c before the vulnerability was announced."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "[linux-kernel] 20140320 [PATCH v3] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors",
              "refsource": "MLIST",
              "url": "https://lkml.org/lkml/2014/3/20/421"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1079012",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1079012"
            },
            {
              "name": "USN-2240-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2240-1"
            },
            {
              "name": "66348",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/66348"
            },
            {
              "name": "59599",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59599"
            },
            {
              "name": "linux-kernel-cve20142568-info-disclosure(91922)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/91922"
            },
            {
              "name": "[oss-sec] 20140320 CVE request -- kernel: net: potential information leak when ubuf backed skbs are skb_zerocopy()ied",
              "refsource": "MLIST",
              "url": "http://seclists.org/oss-sec/2014/q1/627"
            },
            {
              "name": "[oss-security] 20140320 Re: CVE request -- kernel: net: potential information leak when ubuf backed skbs are skb_zerocopy()ied",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2014/03/20/16"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2014-2568",
    "datePublished": "2014-03-24T10:00:00.000Z",
    "dateReserved": "2014-03-20T00:00:00.000Z",
    "dateUpdated": "2024-08-06T10:21:35.474Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2014-2851 (GCVE-0-2014-2851)

Vulnerability from cvelistv5 – Published: 2014-04-14 23:00 – Updated: 2024-08-06 10:28

Summary

Integer overflow in the ping_init_sock function in net/ipv4/ping.c in the Linux kernel through 3.14.1 allows local users to cause a denial of service (use-after-free and system crash) or possibly gain privileges via a crafted application that leverages an improperly managed reference counter.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

9 references

URL	Tags
https://git.kernel.org/cgit/linux/kernel/git/dave…	x_refsource_CONFIRM
https://bugzilla.redhat.com/show_bug.cgi?id=1086730	x_refsource_CONFIRM
http://www.securitytracker.com/id/1030769	vdb-entryx_refsource_SECTRACK
http://secunia.com/advisories/59386	third-party-advisoryx_refsource_SECUNIA
https://lkml.org/lkml/2014/4/10/736	mailing-listx_refsource_MLIST
http://secunia.com/advisories/59599	third-party-advisoryx_refsource_SECUNIA
http://www.debian.org/security/2014/dsa-2926	vendor-advisoryx_refsource_DEBIAN
http://www.securityfocus.com/bid/66779	vdb-entryx_refsource_BID
http://www.openwall.com/lists/oss-security/2014/04/11/4	mailing-listx_refsource_MLIST

Date Public

2014-04-11 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T10:28:46.193Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://git.kernel.org/cgit/linux/kernel/git/davem/net.git/commit/?id=b04c46190219a4f845e46a459e3102137b7f6cac"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1086730"
          },
          {
            "name": "1030769",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1030769"
          },
          {
            "name": "59386",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59386"
          },
          {
            "name": "[linux-kernel] 20140411 net: ipv4: current group_info should be put after using.",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lkml.org/lkml/2014/4/10/736"
          },
          {
            "name": "59599",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59599"
          },
          {
            "name": "DSA-2926",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-2926"
          },
          {
            "name": "66779",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/66779"
          },
          {
            "name": "[oss-security] 20140411 Re: CVE request -- Linux kernel: net: ping: refcount issue in ping_init_sock() function",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2014/04/11/4"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-04-11T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Integer overflow in the ping_init_sock function in net/ipv4/ping.c in the Linux kernel through 3.14.1 allows local users to cause a denial of service (use-after-free and system crash) or possibly gain privileges via a crafted application that leverages an improperly managed reference counter."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-01-04T17:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://git.kernel.org/cgit/linux/kernel/git/davem/net.git/commit/?id=b04c46190219a4f845e46a459e3102137b7f6cac"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1086730"
        },
        {
          "name": "1030769",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1030769"
        },
        {
          "name": "59386",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59386"
        },
        {
          "name": "[linux-kernel] 20140411 net: ipv4: current group_info should be put after using.",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lkml.org/lkml/2014/4/10/736"
        },
        {
          "name": "59599",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59599"
        },
        {
          "name": "DSA-2926",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-2926"
        },
        {
          "name": "66779",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/66779"
        },
        {
          "name": "[oss-security] 20140411 Re: CVE request -- Linux kernel: net: ping: refcount issue in ping_init_sock() function",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2014/04/11/4"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2014-2851",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Integer overflow in the ping_init_sock function in net/ipv4/ping.c in the Linux kernel through 3.14.1 allows local users to cause a denial of service (use-after-free and system crash) or possibly gain privileges via a crafted application that leverages an improperly managed reference counter."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://git.kernel.org/cgit/linux/kernel/git/davem/net.git/commit/?id=b04c46190219a4f845e46a459e3102137b7f6cac",
              "refsource": "CONFIRM",
              "url": "https://git.kernel.org/cgit/linux/kernel/git/davem/net.git/commit/?id=b04c46190219a4f845e46a459e3102137b7f6cac"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1086730",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1086730"
            },
            {
              "name": "1030769",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1030769"
            },
            {
              "name": "59386",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59386"
            },
            {
              "name": "[linux-kernel] 20140411 net: ipv4: current group_info should be put after using.",
              "refsource": "MLIST",
              "url": "https://lkml.org/lkml/2014/4/10/736"
            },
            {
              "name": "59599",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59599"
            },
            {
              "name": "DSA-2926",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2014/dsa-2926"
            },
            {
              "name": "66779",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/66779"
            },
            {
              "name": "[oss-security] 20140411 Re: CVE request -- Linux kernel: net: ping: refcount issue in ping_init_sock() function",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2014/04/11/4"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2014-2851",
    "datePublished": "2014-04-14T23:00:00.000Z",
    "dateReserved": "2014-04-11T00:00:00.000Z",
    "dateUpdated": "2024-08-06T10:28:46.193Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2014-3144 (GCVE-0-2014-3144)

Vulnerability from cvelistv5 – Published: 2014-05-11 21:00 – Updated: 2024-08-06 10:35

Summary

The (1) BPF_S_ANC_NLATTR and (2) BPF_S_ANC_NLATTR_NEST extension implementations in the sk_run_filter function in net/core/filter.c in the Linux kernel through 3.14.3 do not check whether a certain length value is sufficiently large, which allows local users to cause a denial of service (integer underflow and system crash) via crafted BPF instructions. NOTE: the affected code was moved to the __skb_get_nlattr and __skb_get_nlattr_nest functions before the vulnerability was announced.

Severity

No CVSS data available.

CWE

Assigner

redhat redhat root

References

17 references

URL	Tags
http://www.openwall.com/lists/oss-security/2014/05/09/6	mailing-listx_refsource_MLIST
http://www.ubuntu.com/usn/USN-2263-1	vendor-advisoryx_refsource_UBUNTU
http://www.debian.org/security/2014/dsa-2949	vendor-advisoryx_refsource_DEBIAN
http://www.ubuntu.com/usn/USN-2261-1	vendor-advisoryx_refsource_UBUNTU
http://www.ubuntu.com/usn/USN-2252-1	vendor-advisoryx_refsource_UBUNTU
http://linux.oracle.com/errata/ELSA-2014-3052.html	x_refsource_CONFIRM
http://secunia.com/advisories/58990	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/60613	third-party-advisoryx_refsource_SECUNIA
http://www.ubuntu.com/usn/USN-2264-1	vendor-advisoryx_refsource_UBUNTU
https://github.com/torvalds/linux/commit/05ab8f26…	x_refsource_CONFIRM
http://www.securityfocus.com/bid/67309	vdb-entryx_refsource_BID
http://git.kernel.org/?p=linux/kernel/git/torvald…	x_refsource_CONFIRM
http://www.ubuntu.com/usn/USN-2262-1	vendor-advisoryx_refsource_UBUNTU
http://www.ubuntu.com/usn/USN-2259-1	vendor-advisoryx_refsource_UBUNTU
http://www.ubuntu.com/usn/USN-2251-1	vendor-advisoryx_refsource_UBUNTU
http://secunia.com/advisories/59311	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/59597	third-party-advisoryx_refsource_SECUNIA

Date Public

2014-05-09 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T10:35:56.534Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[oss-security] 20140509 Re: CVE request Linux kernel: filter: prevent nla extensions to peek beyond the end of the message",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2014/05/09/6"
          },
          {
            "name": "USN-2263-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2263-1"
          },
          {
            "name": "DSA-2949",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-2949"
          },
          {
            "name": "USN-2261-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2261-1"
          },
          {
            "name": "USN-2252-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2252-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://linux.oracle.com/errata/ELSA-2014-3052.html"
          },
          {
            "name": "58990",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/58990"
          },
          {
            "name": "60613",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/60613"
          },
          {
            "name": "USN-2264-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2264-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/05ab8f2647e4221cbdb3856dd7d32bd5407316b3"
          },
          {
            "name": "67309",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/67309"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=05ab8f2647e4221cbdb3856dd7d32bd5407316b3"
          },
          {
            "name": "USN-2262-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2262-1"
          },
          {
            "name": "USN-2259-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2259-1"
          },
          {
            "name": "USN-2251-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2251-1"
          },
          {
            "name": "59311",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59311"
          },
          {
            "name": "59597",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59597"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-05-09T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The (1) BPF_S_ANC_NLATTR and (2) BPF_S_ANC_NLATTR_NEST extension implementations in the sk_run_filter function in net/core/filter.c in the Linux kernel through 3.14.3 do not check whether a certain length value is sufficiently large, which allows local users to cause a denial of service (integer underflow and system crash) via crafted BPF instructions.  NOTE: the affected code was moved to the __skb_get_nlattr and __skb_get_nlattr_nest functions before the vulnerability was announced."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-28T19:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "[oss-security] 20140509 Re: CVE request Linux kernel: filter: prevent nla extensions to peek beyond the end of the message",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2014/05/09/6"
        },
        {
          "name": "USN-2263-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2263-1"
        },
        {
          "name": "DSA-2949",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-2949"
        },
        {
          "name": "USN-2261-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2261-1"
        },
        {
          "name": "USN-2252-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2252-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://linux.oracle.com/errata/ELSA-2014-3052.html"
        },
        {
          "name": "58990",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/58990"
        },
        {
          "name": "60613",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/60613"
        },
        {
          "name": "USN-2264-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2264-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/torvalds/linux/commit/05ab8f2647e4221cbdb3856dd7d32bd5407316b3"
        },
        {
          "name": "67309",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/67309"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=05ab8f2647e4221cbdb3856dd7d32bd5407316b3"
        },
        {
          "name": "USN-2262-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2262-1"
        },
        {
          "name": "USN-2259-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2259-1"
        },
        {
          "name": "USN-2251-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2251-1"
        },
        {
          "name": "59311",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59311"
        },
        {
          "name": "59597",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59597"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2014-3144",
    "datePublished": "2014-05-11T21:00:00.000Z",
    "dateReserved": "2014-05-02T00:00:00.000Z",
    "dateUpdated": "2024-08-06T10:35:56.534Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2014-3145 (GCVE-0-2014-3145)

Vulnerability from cvelistv5 – Published: 2014-05-11 21:00 – Updated: 2024-08-06 10:35

Summary

The BPF_S_ANC_NLATTR_NEST extension implementation in the sk_run_filter function in net/core/filter.c in the Linux kernel through 3.14.3 uses the reverse order in a certain subtraction, which allows local users to cause a denial of service (over-read and system crash) via crafted BPF instructions. NOTE: the affected code was moved to the __skb_get_nlattr_nest function before the vulnerability was announced.

Severity

No CVSS data available.

CWE

Assigner

redhat redhat root

References

19 references

URL	Tags
http://www.openwall.com/lists/oss-security/2014/05/09/6	mailing-listx_refsource_MLIST
http://www.ubuntu.com/usn/USN-2263-1	vendor-advisoryx_refsource_UBUNTU
http://www.debian.org/security/2014/dsa-2949	vendor-advisoryx_refsource_DEBIAN
https://source.android.com/security/bulletin/2017-04-01	x_refsource_CONFIRM
http://www.ubuntu.com/usn/USN-2261-1	vendor-advisoryx_refsource_UBUNTU
http://www.ubuntu.com/usn/USN-2252-1	vendor-advisoryx_refsource_UBUNTU
http://linux.oracle.com/errata/ELSA-2014-3052.html	x_refsource_CONFIRM
http://secunia.com/advisories/58990	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/60613	third-party-advisoryx_refsource_SECUNIA
http://www.ubuntu.com/usn/USN-2264-1	vendor-advisoryx_refsource_UBUNTU
https://github.com/torvalds/linux/commit/05ab8f26…	x_refsource_CONFIRM
http://git.kernel.org/?p=linux/kernel/git/torvald…	x_refsource_CONFIRM
http://www.ubuntu.com/usn/USN-2262-1	vendor-advisoryx_refsource_UBUNTU
http://www.securityfocus.com/bid/67321	vdb-entryx_refsource_BID
http://www.ubuntu.com/usn/USN-2259-1	vendor-advisoryx_refsource_UBUNTU
http://www.ubuntu.com/usn/USN-2251-1	vendor-advisoryx_refsource_UBUNTU
http://secunia.com/advisories/59311	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/59597	third-party-advisoryx_refsource_SECUNIA
http://www.securitytracker.com/id/1038201	vdb-entryx_refsource_SECTRACK

Date Public

2014-05-09 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T10:35:56.598Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[oss-security] 20140509 Re: CVE request Linux kernel: filter: prevent nla extensions to peek beyond the end of the message",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2014/05/09/6"
          },
          {
            "name": "USN-2263-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2263-1"
          },
          {
            "name": "DSA-2949",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-2949"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://source.android.com/security/bulletin/2017-04-01"
          },
          {
            "name": "USN-2261-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2261-1"
          },
          {
            "name": "USN-2252-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2252-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://linux.oracle.com/errata/ELSA-2014-3052.html"
          },
          {
            "name": "58990",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/58990"
          },
          {
            "name": "60613",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/60613"
          },
          {
            "name": "USN-2264-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2264-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/05ab8f2647e4221cbdb3856dd7d32bd5407316b3"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=05ab8f2647e4221cbdb3856dd7d32bd5407316b3"
          },
          {
            "name": "USN-2262-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2262-1"
          },
          {
            "name": "67321",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/67321"
          },
          {
            "name": "USN-2259-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2259-1"
          },
          {
            "name": "USN-2251-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2251-1"
          },
          {
            "name": "59311",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59311"
          },
          {
            "name": "59597",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59597"
          },
          {
            "name": "1038201",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038201"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-05-09T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The BPF_S_ANC_NLATTR_NEST extension implementation in the sk_run_filter function in net/core/filter.c in the Linux kernel through 3.14.3 uses the reverse order in a certain subtraction, which allows local users to cause a denial of service (over-read and system crash) via crafted BPF instructions.  NOTE: the affected code was moved to the __skb_get_nlattr_nest function before the vulnerability was announced."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-28T19:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "[oss-security] 20140509 Re: CVE request Linux kernel: filter: prevent nla extensions to peek beyond the end of the message",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2014/05/09/6"
        },
        {
          "name": "USN-2263-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2263-1"
        },
        {
          "name": "DSA-2949",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-2949"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://source.android.com/security/bulletin/2017-04-01"
        },
        {
          "name": "USN-2261-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2261-1"
        },
        {
          "name": "USN-2252-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2252-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://linux.oracle.com/errata/ELSA-2014-3052.html"
        },
        {
          "name": "58990",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/58990"
        },
        {
          "name": "60613",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/60613"
        },
        {
          "name": "USN-2264-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2264-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/torvalds/linux/commit/05ab8f2647e4221cbdb3856dd7d32bd5407316b3"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=05ab8f2647e4221cbdb3856dd7d32bd5407316b3"
        },
        {
          "name": "USN-2262-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2262-1"
        },
        {
          "name": "67321",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/67321"
        },
        {
          "name": "USN-2259-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2259-1"
        },
        {
          "name": "USN-2251-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2251-1"
        },
        {
          "name": "59311",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59311"
        },
        {
          "name": "59597",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59597"
        },
        {
          "name": "1038201",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038201"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2014-3145",
    "datePublished": "2014-05-11T21:00:00.000Z",
    "dateReserved": "2014-05-02T00:00:00.000Z",
    "dateUpdated": "2024-08-06T10:35:56.598Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2014-3153 (GCVE-0-2014-3153)

Vulnerability from cvelistv5 – Published: 2014-06-07 14:00 – Updated: 2025-10-22 00:05

Summary

The futex_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not ensure that calls have two different futex addresses, which allows local users to gain privileges via a crafted FUTEX_REQUEUE command that facilitates unsafe waiter modification.

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: active Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-02-03 14:12 UTC

CWE

Assigner

Chrome Google root

References

40 references

URL	Tags
http://www.securityfocus.com/bid/67906	vdb-entryx_refsource_BID
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://openwall.com/lists/oss-security/2014/06/05/24	mailing-listx_refsource_MLIST
http://secunia.com/advisories/59029	third-party-advisoryx_refsource_SECUNIA
http://www.debian.org/security/2014/dsa-2949	vendor-advisoryx_refsource_DEBIAN
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://secunia.com/advisories/59262	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/58990	third-party-advisoryx_refsource_SECUNIA
https://git.kernel.org/cgit/linux/kernel/git/torv…	x_refsource_CONFIRM
https://git.kernel.org/cgit/linux/kernel/git/torv…	x_refsource_CONFIRM
http://git.kernel.org/?p=linux/kernel/git/torvald…	x_refsource_CONFIRM
http://linux.oracle.com/errata/ELSA-2014-3037.html	x_refsource_CONFIRM
http://secunia.com/advisories/59153	third-party-advisoryx_refsource_SECUNIA
http://openwall.com/lists/oss-security/2014/06/06/20	mailing-listx_refsource_MLIST
http://secunia.com/advisories/59309	third-party-advisoryx_refsource_SECUNIA
https://github.com/torvalds/linux/commit/e9c243a5…	x_refsource_CONFIRM
http://www.securitytracker.com/id/1030451	vdb-entryx_refsource_SECTRACK
http://linux.oracle.com/errata/ELSA-2014-0771.html	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://rhn.redhat.com/errata/RHSA-2014-0800.html	vendor-advisoryx_refsource_REDHAT
http://www.ubuntu.com/usn/USN-2237-1	vendor-advisoryx_refsource_UBUNTU
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://linux.oracle.com/errata/ELSA-2014-3039.html	x_refsource_CONFIRM
https://git.kernel.org/cgit/linux/kernel/git/torv…	x_refsource_CONFIRM
http://secunia.com/advisories/58500	third-party-advisoryx_refsource_SECUNIA
http://www.ubuntu.com/usn/USN-2240-1	vendor-advisoryx_refsource_UBUNTU
https://bugzilla.redhat.com/show_bug.cgi?id=1103626	x_refsource_CONFIRM
http://secunia.com/advisories/59386	third-party-advisoryx_refsource_SECUNIA
http://www.exploit-db.com/exploits/35370	exploitx_refsource_EXPLOIT-DB
http://secunia.com/advisories/59599	third-party-advisoryx_refsource_SECUNIA
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.openwall.com/lists/oss-security/2014/0…	mailing-listx_refsource_MLIST
http://secunia.com/advisories/59092	third-party-advisoryx_refsource_SECUNIA
http://linux.oracle.com/errata/ELSA-2014-3038.html	x_refsource_CONFIRM
http://www.openwall.com/lists/oss-security/2021/02/01/4	mailing-listx_refsource_MLIST
https://www.openwall.com/lists/oss-security/2021/…	x_refsource_MISC
https://elongl.github.io/exploitation/2021/01/08/…	x_refsource_MISC
https://github.com/elongl/CVE-2014-3153	x_refsource_MISC
https://www.cisa.gov/known-exploited-vulnerabilit…	government-resource

Date Public

2014-06-04 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T10:35:56.633Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "67906",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/67906"
          },
          {
            "name": "openSUSE-SU-2014:0878",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-07/msg00006.html"
          },
          {
            "name": "[oss-security] 20140605 Re: Linux kernel futex local privilege escalation (CVE-2014-3153)",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2014/06/05/24"
          },
          {
            "name": "59029",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59029"
          },
          {
            "name": "DSA-2949",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-2949"
          },
          {
            "name": "SUSE-SU-2014:1316",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00006.html"
          },
          {
            "name": "SUSE-SU-2014:0796",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00018.html"
          },
          {
            "name": "59262",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59262"
          },
          {
            "name": "58990",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/58990"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=13fbca4c6ecd96ec1a1cfa2e4f2ce191fe928a5e"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=54a217887a7b658e2650c3feff22756ab80c7339"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e9c243a5a6de0be8e584c604d353412584b592f8"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://linux.oracle.com/errata/ELSA-2014-3037.html"
          },
          {
            "name": "59153",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59153"
          },
          {
            "name": "[oss-security] 20140606 Re: Linux kernel futex local privilege escalation (CVE-2014-3153)",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2014/06/06/20"
          },
          {
            "name": "59309",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59309"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/e9c243a5a6de0be8e584c604d353412584b592f8"
          },
          {
            "name": "1030451",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1030451"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://linux.oracle.com/errata/ELSA-2014-0771.html"
          },
          {
            "name": "SUSE-SU-2014:0775",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00014.html"
          },
          {
            "name": "RHSA-2014:0800",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0800.html"
          },
          {
            "name": "USN-2237-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2237-1"
          },
          {
            "name": "SUSE-SU-2014:1319",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00007.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://linux.oracle.com/errata/ELSA-2014-3039.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b3eaa9fc5cd0a4d74b18f6b8dc617aeaf1873270"
          },
          {
            "name": "58500",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/58500"
          },
          {
            "name": "USN-2240-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2240-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1103626"
          },
          {
            "name": "59386",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59386"
          },
          {
            "name": "35370",
            "tags": [
              "exploit",
              "x_refsource_EXPLOIT-DB",
              "x_transferred"
            ],
            "url": "http://www.exploit-db.com/exploits/35370"
          },
          {
            "name": "59599",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59599"
          },
          {
            "name": "SUSE-SU-2014:0837",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00025.html"
          },
          {
            "name": "[oss-security] 20140605 Linux kernel futex local privilege escalation (CVE-2014-3153)",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2014/06/05/22"
          },
          {
            "name": "59092",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59092"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://linux.oracle.com/errata/ELSA-2014-3038.html"
          },
          {
            "name": "[oss-security] 20210201 Re: Linux Kernel: local priv escalation via futexes",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2021/02/01/4"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.openwall.com/lists/oss-security/2021/02/01/4"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://elongl.github.io/exploitation/2021/01/08/cve-2014-3153.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/elongl/CVE-2014-3153"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2014-3153",
                "options": [
                  {
                    "Exploitation": "active"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-02-03T14:12:20.309556Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          },
          {
            "other": {
              "content": {
                "dateAdded": "2022-05-25",
                "reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2014-3153"
              },
              "type": "kev"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "description": "CWE-noinfo Not enough information",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-10-22T00:05:37.360Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "government-resource"
            ],
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2014-3153"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2022-05-25T00:00:00.000Z",
            "value": "CVE-2014-3153 added to CISA KEV"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-06-04T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The futex_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not ensure that calls have two different futex addresses, which allows local users to gain privileges via a crafted FUTEX_REQUEUE command that facilitates unsafe waiter modification."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-02-02T06:37:16.000Z",
        "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
        "shortName": "Chrome"
      },
      "references": [
        {
          "name": "67906",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/67906"
        },
        {
          "name": "openSUSE-SU-2014:0878",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-07/msg00006.html"
        },
        {
          "name": "[oss-security] 20140605 Re: Linux kernel futex local privilege escalation (CVE-2014-3153)",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://openwall.com/lists/oss-security/2014/06/05/24"
        },
        {
          "name": "59029",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59029"
        },
        {
          "name": "DSA-2949",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-2949"
        },
        {
          "name": "SUSE-SU-2014:1316",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00006.html"
        },
        {
          "name": "SUSE-SU-2014:0796",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00018.html"
        },
        {
          "name": "59262",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59262"
        },
        {
          "name": "58990",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/58990"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=13fbca4c6ecd96ec1a1cfa2e4f2ce191fe928a5e"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=54a217887a7b658e2650c3feff22756ab80c7339"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e9c243a5a6de0be8e584c604d353412584b592f8"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://linux.oracle.com/errata/ELSA-2014-3037.html"
        },
        {
          "name": "59153",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59153"
        },
        {
          "name": "[oss-security] 20140606 Re: Linux kernel futex local privilege escalation (CVE-2014-3153)",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://openwall.com/lists/oss-security/2014/06/06/20"
        },
        {
          "name": "59309",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59309"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/torvalds/linux/commit/e9c243a5a6de0be8e584c604d353412584b592f8"
        },
        {
          "name": "1030451",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1030451"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://linux.oracle.com/errata/ELSA-2014-0771.html"
        },
        {
          "name": "SUSE-SU-2014:0775",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00014.html"
        },
        {
          "name": "RHSA-2014:0800",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0800.html"
        },
        {
          "name": "USN-2237-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2237-1"
        },
        {
          "name": "SUSE-SU-2014:1319",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00007.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://linux.oracle.com/errata/ELSA-2014-3039.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b3eaa9fc5cd0a4d74b18f6b8dc617aeaf1873270"
        },
        {
          "name": "58500",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/58500"
        },
        {
          "name": "USN-2240-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2240-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1103626"
        },
        {
          "name": "59386",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59386"
        },
        {
          "name": "35370",
          "tags": [
            "exploit",
            "x_refsource_EXPLOIT-DB"
          ],
          "url": "http://www.exploit-db.com/exploits/35370"
        },
        {
          "name": "59599",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59599"
        },
        {
          "name": "SUSE-SU-2014:0837",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00025.html"
        },
        {
          "name": "[oss-security] 20140605 Linux kernel futex local privilege escalation (CVE-2014-3153)",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2014/06/05/22"
        },
        {
          "name": "59092",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59092"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://linux.oracle.com/errata/ELSA-2014-3038.html"
        },
        {
          "name": "[oss-security] 20210201 Re: Linux Kernel: local priv escalation via futexes",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2021/02/01/4"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.openwall.com/lists/oss-security/2021/02/01/4"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://elongl.github.io/exploitation/2021/01/08/cve-2014-3153.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/elongl/CVE-2014-3153"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "chrome-cve-admin@google.com",
          "ID": "CVE-2014-3153",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The futex_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not ensure that calls have two different futex addresses, which allows local users to gain privileges via a crafted FUTEX_REQUEUE command that facilitates unsafe waiter modification."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "67906",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/67906"
            },
            {
              "name": "openSUSE-SU-2014:0878",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-07/msg00006.html"
            },
            {
              "name": "[oss-security] 20140605 Re: Linux kernel futex local privilege escalation (CVE-2014-3153)",
              "refsource": "MLIST",
              "url": "http://openwall.com/lists/oss-security/2014/06/05/24"
            },
            {
              "name": "59029",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59029"
            },
            {
              "name": "DSA-2949",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2014/dsa-2949"
            },
            {
              "name": "SUSE-SU-2014:1316",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00006.html"
            },
            {
              "name": "SUSE-SU-2014:0796",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00018.html"
            },
            {
              "name": "59262",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59262"
            },
            {
              "name": "58990",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/58990"
            },
            {
              "name": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=13fbca4c6ecd96ec1a1cfa2e4f2ce191fe928a5e",
              "refsource": "CONFIRM",
              "url": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=13fbca4c6ecd96ec1a1cfa2e4f2ce191fe928a5e"
            },
            {
              "name": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=54a217887a7b658e2650c3feff22756ab80c7339",
              "refsource": "CONFIRM",
              "url": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=54a217887a7b658e2650c3feff22756ab80c7339"
            },
            {
              "name": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=e9c243a5a6de0be8e584c604d353412584b592f8",
              "refsource": "CONFIRM",
              "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=e9c243a5a6de0be8e584c604d353412584b592f8"
            },
            {
              "name": "http://linux.oracle.com/errata/ELSA-2014-3037.html",
              "refsource": "CONFIRM",
              "url": "http://linux.oracle.com/errata/ELSA-2014-3037.html"
            },
            {
              "name": "59153",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59153"
            },
            {
              "name": "[oss-security] 20140606 Re: Linux kernel futex local privilege escalation (CVE-2014-3153)",
              "refsource": "MLIST",
              "url": "http://openwall.com/lists/oss-security/2014/06/06/20"
            },
            {
              "name": "59309",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59309"
            },
            {
              "name": "https://github.com/torvalds/linux/commit/e9c243a5a6de0be8e584c604d353412584b592f8",
              "refsource": "CONFIRM",
              "url": "https://github.com/torvalds/linux/commit/e9c243a5a6de0be8e584c604d353412584b592f8"
            },
            {
              "name": "1030451",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1030451"
            },
            {
              "name": "http://linux.oracle.com/errata/ELSA-2014-0771.html",
              "refsource": "CONFIRM",
              "url": "http://linux.oracle.com/errata/ELSA-2014-0771.html"
            },
            {
              "name": "SUSE-SU-2014:0775",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00014.html"
            },
            {
              "name": "RHSA-2014:0800",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0800.html"
            },
            {
              "name": "USN-2237-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2237-1"
            },
            {
              "name": "SUSE-SU-2014:1319",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00007.html"
            },
            {
              "name": "http://linux.oracle.com/errata/ELSA-2014-3039.html",
              "refsource": "CONFIRM",
              "url": "http://linux.oracle.com/errata/ELSA-2014-3039.html"
            },
            {
              "name": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b3eaa9fc5cd0a4d74b18f6b8dc617aeaf1873270",
              "refsource": "CONFIRM",
              "url": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b3eaa9fc5cd0a4d74b18f6b8dc617aeaf1873270"
            },
            {
              "name": "58500",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/58500"
            },
            {
              "name": "USN-2240-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2240-1"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1103626",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1103626"
            },
            {
              "name": "59386",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59386"
            },
            {
              "name": "35370",
              "refsource": "EXPLOIT-DB",
              "url": "http://www.exploit-db.com/exploits/35370"
            },
            {
              "name": "59599",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59599"
            },
            {
              "name": "SUSE-SU-2014:0837",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00025.html"
            },
            {
              "name": "[oss-security] 20140605 Linux kernel futex local privilege escalation (CVE-2014-3153)",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2014/06/05/22"
            },
            {
              "name": "59092",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59092"
            },
            {
              "name": "http://linux.oracle.com/errata/ELSA-2014-3038.html",
              "refsource": "CONFIRM",
              "url": "http://linux.oracle.com/errata/ELSA-2014-3038.html"
            },
            {
              "name": "[oss-security] 20210201 Re: Linux Kernel: local priv escalation via futexes",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2021/02/01/4"
            },
            {
              "name": "https://www.openwall.com/lists/oss-security/2021/02/01/4",
              "refsource": "MISC",
              "url": "https://www.openwall.com/lists/oss-security/2021/02/01/4"
            },
            {
              "name": "https://elongl.github.io/exploitation/2021/01/08/cve-2014-3153.html",
              "refsource": "MISC",
              "url": "https://elongl.github.io/exploitation/2021/01/08/cve-2014-3153.html"
            },
            {
              "name": "https://github.com/elongl/CVE-2014-3153",
              "refsource": "MISC",
              "url": "https://github.com/elongl/CVE-2014-3153"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
    "assignerShortName": "Chrome",
    "cveId": "CVE-2014-3153",
    "datePublished": "2014-06-07T14:00:00.000Z",
    "dateReserved": "2014-05-03T00:00:00.000Z",
    "dateUpdated": "2025-10-22T00:05:37.360Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

RHSA-2014:0786

CVE-2014-0206 (GCVE-0-2014-0206)

CVE-2014-1737 (GCVE-0-2014-1737)

CVE-2014-1738 (GCVE-0-2014-1738)

CVE-2014-2568 (GCVE-0-2014-2568)

CVE-2014-2851 (GCVE-0-2014-2851)

CVE-2014-3144 (GCVE-0-2014-3144)

CVE-2014-3145 (GCVE-0-2014-3145)

CVE-2014-3153 (GCVE-0-2014-3153)

Tags

Sightings

Nomenclature

Related by attack behaviour