Vulnerability-Lookup

RHSA-2014_1971

Vulnerability from csaf_redhat - Published: 2014-12-09 20:33 - Updated: 2024-11-22 08:50

Summary

Red Hat Security Advisory: kernel security and bug fix update

Severity

Important

Notes

Topic: Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section. The kernel packages contain the Linux kernel, the core of any Linux operating system.

Details: * A flaw was found in the way the Linux kernel's SCTP implementation handled malformed or duplicate Address Configuration Change Chunks (ASCONF). A remote attacker could use either of these flaws to crash the system. (CVE-2014-3673, CVE-2014-3687, Important) * A flaw was found in the way the Linux kernel's SCTP implementation handled the association's output queue. A remote attacker could send specially crafted packets that would cause the system to use an excessive amount of memory, leading to a denial of service. (CVE-2014-3688, Important) * Two flaws were found in the way the Apple Magic Mouse/Trackpad multi-touch driver and the Minibox PicoLCD driver handled invalid HID reports. An attacker with physical access to the system could use these flaws to crash the system or, potentially, escalate their privileges on the system. (CVE-2014-3181, CVE-2014-3186, Moderate) * A memory corruption flaw was found in the way the USB ConnectTech WhiteHEAT serial driver processed completion commands sent via USB Request Blocks buffers. An attacker with physical access to the system could use this flaw to crash the system or, potentially, escalate their privileges on the system. (CVE-2014-3185, Moderate) * A flaw was found in the way the Linux kernel's keys subsystem handled the termination condition in the associative array garbage collection functionality. A local, unprivileged user could use this flaw to crash the system. (CVE-2014-3631, Moderate) * Multiple flaws were found in the way the Linux kernel's ALSA implementation handled user controls. A local, privileged user could use either of these flaws to crash the system. (CVE-2014-4654, CVE-2014-4655, CVE-2014-4656, Moderate) * A flaw was found in the way the Linux kernel's VFS subsystem handled reference counting when performing unmount operations on symbolic links. A local, unprivileged user could use this flaw to exhaust all available memory on the system or, potentially, trigger a use-after-free error, resulting in a system crash or privilege escalation. (CVE-2014-5045, Moderate) * A flaw was found in the way the get_dumpable() function return value was interpreted in the ptrace subsystem of the Linux kernel. When 'fs.suid_dumpable' was set to 2, a local, unprivileged local user could use this flaw to bypass intended ptrace restrictions and obtain potentially sensitive information. (CVE-2013-2929, Low) * A stack overflow flaw caused by infinite recursion was found in the way the Linux kernel's UDF file system implementation processed indirect ICBs. An attacker with physical access to the system could use a specially crafted UDF image to crash the system. (CVE-2014-6410, Low) * An information leak flaw in the way the Linux kernel handled media device enumerate entities IOCTL requests could allow a local user able to access the /dev/media0 device file to leak kernel memory bytes. (CVE-2014-1739, Low) * An out-of-bounds read flaw in the Logitech Unifying receiver driver could allow an attacker with physical access to the system to crash the system or, potentially, escalate their privileges on the system. (CVE-2014-3182, Low) * Multiple out-of-bounds write flaws were found in the way the Cherry Cymotion keyboard driver, KYE/Genius device drivers, Logitech device drivers, Monterey Genius KB29E keyboard driver, Petalynx Maxter remote control driver, and Sunplus wireless desktop driver handled invalid HID reports. An attacker with physical access to the system could use either of these flaws to write data past an allocated memory buffer. (CVE-2014-3184, Low) * An information leak flaw was found in the RAM Disks Memory Copy (rd_mcp) back end driver of the iSCSI Target subsystem could allow a privileged user to leak the contents of kernel memory to an iSCSI initiator remote client. (CVE-2014-4027, Low) * An information leak flaw in the Linux kernel's ALSA implementation could allow a local, privileged user to leak kernel memory to user space. (CVE-2014-4652, Low)

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2013-2929

A flaw was found in the way the get_dumpable() function return value was interpreted in the ptrace subsystem of the Linux kernel. When 'fs.suid_dumpable' was set to 2, a local, unprivileged local user could use this flaw to bypass intended ptrace restrictions and obtain potentially sensitive information.

1.9 ()


                
                  AV:L/AC:M/Au:N/C:P/I:N/A:N

Affected products

Fixed 408 products

Product	Version	Remediation
Unresolved product id: 7Client-7.0.Z:kernel-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-7.0.Z:kernel-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-7.0.Z:kernel-0:3.10.0-123.13.1.el7.src	—	Vendor Fix fix
Unresolved product id: 7Client-7.0.Z:kernel-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-7.0.Z:kernel-abi-whitelists-0:3.10.0-123.13.1.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Client-7.0.Z:kernel-bootwrapper-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-7.0.Z:kernel-debug-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-7.0.Z:kernel-debug-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-7.0.Z:kernel-debug-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-7.0.Z:kernel-debug-debuginfo-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-7.0.Z:kernel-debug-debuginfo-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-7.0.Z:kernel-debug-debuginfo-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-7.0.Z:kernel-debug-devel-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-7.0.Z:kernel-debug-devel-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-7.0.Z:kernel-debug-devel-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-7.0.Z:kernel-debuginfo-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-7.0.Z:kernel-debuginfo-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-7.0.Z:kernel-debuginfo-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-7.0.Z:kernel-debuginfo-common-ppc64-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-7.0.Z:kernel-debuginfo-common-s390x-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-7.0.Z:kernel-debuginfo-common-x86_64-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-7.0.Z:kernel-devel-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-7.0.Z:kernel-devel-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-7.0.Z:kernel-devel-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-7.0.Z:kernel-doc-0:3.10.0-123.13.1.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Client-7.0.Z:kernel-headers-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-7.0.Z:kernel-headers-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-7.0.Z:kernel-headers-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-7.0.Z:kernel-kdump-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-7.0.Z:kernel-kdump-debuginfo-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-7.0.Z:kernel-kdump-devel-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-7.0.Z:kernel-tools-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-7.0.Z:kernel-tools-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-7.0.Z:kernel-tools-debuginfo-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-7.0.Z:kernel-tools-debuginfo-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-7.0.Z:kernel-tools-libs-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-7.0.Z:kernel-tools-libs-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-7.0.Z:kernel-tools-libs-devel-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-7.0.Z:kernel-tools-libs-devel-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-7.0.Z:perf-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-7.0.Z:perf-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-7.0.Z:perf-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-7.0.Z:perf-debuginfo-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-7.0.Z:perf-debuginfo-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-7.0.Z:perf-debuginfo-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-7.0.Z:python-perf-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-7.0.Z:python-perf-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-7.0.Z:python-perf-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-7.0.Z:python-perf-debuginfo-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-7.0.Z:python-perf-debuginfo-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-7.0.Z:python-perf-debuginfo-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:kernel-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:kernel-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:kernel-0:3.10.0-123.13.1.el7.src	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:kernel-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:kernel-abi-whitelists-0:3.10.0-123.13.1.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:kernel-bootwrapper-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:kernel-debug-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:kernel-debug-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:kernel-debug-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:kernel-debug-debuginfo-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:kernel-debug-debuginfo-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:kernel-debug-debuginfo-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:kernel-debug-devel-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:kernel-debug-devel-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:kernel-debug-devel-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:kernel-debuginfo-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:kernel-debuginfo-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:kernel-debuginfo-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:kernel-debuginfo-common-ppc64-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:kernel-debuginfo-common-s390x-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:kernel-debuginfo-common-x86_64-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:kernel-devel-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:kernel-devel-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:kernel-devel-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:kernel-doc-0:3.10.0-123.13.1.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:kernel-headers-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:kernel-headers-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:kernel-headers-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:kernel-kdump-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:kernel-kdump-debuginfo-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:kernel-kdump-devel-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:kernel-tools-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:kernel-tools-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:kernel-tools-debuginfo-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:kernel-tools-debuginfo-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:kernel-tools-libs-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:kernel-tools-libs-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:kernel-tools-libs-devel-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:kernel-tools-libs-devel-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:perf-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:perf-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:perf-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:perf-debuginfo-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:perf-debuginfo-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:perf-debuginfo-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:python-perf-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:python-perf-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:python-perf-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:python-perf-debuginfo-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:python-perf-debuginfo-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:python-perf-debuginfo-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.0.Z:kernel-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.0.Z:kernel-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.0.Z:kernel-0:3.10.0-123.13.1.el7.src	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.0.Z:kernel-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.0.Z:kernel-abi-whitelists-0:3.10.0-123.13.1.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.0.Z:kernel-bootwrapper-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.0.Z:kernel-debug-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.0.Z:kernel-debug-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.0.Z:kernel-debug-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.0.Z:kernel-debug-debuginfo-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.0.Z:kernel-debug-debuginfo-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.0.Z:kernel-debug-debuginfo-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.0.Z:kernel-debug-devel-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.0.Z:kernel-debug-devel-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.0.Z:kernel-debug-devel-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.0.Z:kernel-debuginfo-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.0.Z:kernel-debuginfo-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.0.Z:kernel-debuginfo-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.0.Z:kernel-debuginfo-common-ppc64-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.0.Z:kernel-debuginfo-common-s390x-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.0.Z:kernel-debuginfo-common-x86_64-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.0.Z:kernel-devel-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.0.Z:kernel-devel-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.0.Z:kernel-devel-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.0.Z:kernel-doc-0:3.10.0-123.13.1.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.0.Z:kernel-headers-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.0.Z:kernel-headers-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.0.Z:kernel-headers-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.0.Z:kernel-kdump-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.0.Z:kernel-kdump-debuginfo-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.0.Z:kernel-kdump-devel-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.0.Z:kernel-tools-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.0.Z:kernel-tools-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.0.Z:kernel-tools-debuginfo-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.0.Z:kernel-tools-debuginfo-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.0.Z:kernel-tools-libs-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.0.Z:kernel-tools-libs-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.0.Z:kernel-tools-libs-devel-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.0.Z:kernel-tools-libs-devel-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.0.Z:perf-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.0.Z:perf-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.0.Z:perf-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.0.Z:perf-debuginfo-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.0.Z:perf-debuginfo-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.0.Z:perf-debuginfo-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.0.Z:python-perf-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.0.Z:python-perf-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.0.Z:python-perf-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.0.Z:python-perf-debuginfo-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.0.Z:python-perf-debuginfo-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.0.Z:python-perf-debuginfo-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:kernel-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:kernel-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:kernel-0:3.10.0-123.13.1.el7.src	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:kernel-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:kernel-abi-whitelists-0:3.10.0-123.13.1.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:kernel-bootwrapper-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:kernel-debug-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:kernel-debug-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:kernel-debug-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:kernel-debug-debuginfo-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:kernel-debug-debuginfo-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:kernel-debug-debuginfo-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:kernel-debug-devel-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:kernel-debug-devel-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:kernel-debug-devel-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:kernel-debuginfo-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:kernel-debuginfo-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:kernel-debuginfo-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:kernel-debuginfo-common-ppc64-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:kernel-debuginfo-common-s390x-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:kernel-debuginfo-common-x86_64-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:kernel-devel-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:kernel-devel-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:kernel-devel-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:kernel-doc-0:3.10.0-123.13.1.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:kernel-headers-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:kernel-headers-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:kernel-headers-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:kernel-kdump-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:kernel-kdump-debuginfo-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:kernel-kdump-devel-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:kernel-tools-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:kernel-tools-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:kernel-tools-debuginfo-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:kernel-tools-debuginfo-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:kernel-tools-libs-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:kernel-tools-libs-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:kernel-tools-libs-devel-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:kernel-tools-libs-devel-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:perf-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:perf-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:perf-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:perf-debuginfo-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:perf-debuginfo-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:perf-debuginfo-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:python-perf-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:python-perf-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:python-perf-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:python-perf-debuginfo-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:python-perf-debuginfo-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:python-perf-debuginfo-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:kernel-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:kernel-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:kernel-0:3.10.0-123.13.1.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:kernel-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:kernel-abi-whitelists-0:3.10.0-123.13.1.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:kernel-bootwrapper-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:kernel-debug-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:kernel-debug-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:kernel-debug-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:kernel-debug-debuginfo-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:kernel-debug-debuginfo-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:kernel-debug-debuginfo-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:kernel-debug-devel-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:kernel-debug-devel-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:kernel-debug-devel-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:kernel-debuginfo-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:kernel-debuginfo-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:kernel-debuginfo-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:kernel-debuginfo-common-ppc64-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:kernel-debuginfo-common-s390x-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:kernel-debuginfo-common-x86_64-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:kernel-devel-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:kernel-devel-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:kernel-devel-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:kernel-doc-0:3.10.0-123.13.1.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:kernel-headers-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:kernel-headers-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:kernel-headers-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:kernel-kdump-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:kernel-kdump-debuginfo-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:kernel-kdump-devel-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:kernel-tools-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:kernel-tools-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:kernel-tools-debuginfo-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:kernel-tools-debuginfo-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:kernel-tools-libs-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:kernel-tools-libs-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:kernel-tools-libs-devel-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:kernel-tools-libs-devel-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:perf-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:perf-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:perf-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:perf-debuginfo-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:perf-debuginfo-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:perf-debuginfo-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:python-perf-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:python-perf-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:python-perf-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:python-perf-debuginfo-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:python-perf-debuginfo-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:python-perf-debuginfo-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:kernel-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:kernel-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:kernel-0:3.10.0-123.13.1.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:kernel-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:kernel-abi-whitelists-0:3.10.0-123.13.1.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:kernel-bootwrapper-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:kernel-debug-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:kernel-debug-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:kernel-debug-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:kernel-debug-debuginfo-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:kernel-debug-debuginfo-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:kernel-debug-debuginfo-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:kernel-debug-devel-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:kernel-debug-devel-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:kernel-debug-devel-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:kernel-debuginfo-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:kernel-debuginfo-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:kernel-debuginfo-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:kernel-debuginfo-common-ppc64-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:kernel-debuginfo-common-s390x-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:kernel-debuginfo-common-x86_64-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:kernel-devel-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:kernel-devel-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:kernel-devel-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:kernel-doc-0:3.10.0-123.13.1.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:kernel-headers-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:kernel-headers-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:kernel-headers-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:kernel-kdump-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:kernel-kdump-debuginfo-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:kernel-kdump-devel-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:kernel-tools-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:kernel-tools-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:kernel-tools-debuginfo-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:kernel-tools-debuginfo-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:kernel-tools-libs-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:kernel-tools-libs-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:kernel-tools-libs-devel-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:kernel-tools-libs-devel-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:perf-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:perf-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:perf-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:perf-debuginfo-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:perf-debuginfo-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:perf-debuginfo-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:python-perf-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:python-perf-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:python-perf-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:python-perf-debuginfo-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:python-perf-debuginfo-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:python-perf-debuginfo-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:kernel-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:kernel-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:kernel-0:3.10.0-123.13.1.el7.src	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:kernel-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:kernel-abi-whitelists-0:3.10.0-123.13.1.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:kernel-bootwrapper-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:kernel-debug-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:kernel-debug-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:kernel-debug-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:kernel-debug-debuginfo-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:kernel-debug-debuginfo-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:kernel-debug-debuginfo-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:kernel-debug-devel-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:kernel-debug-devel-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:kernel-debug-devel-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:kernel-debuginfo-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:kernel-debuginfo-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:kernel-debuginfo-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:kernel-debuginfo-common-ppc64-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:kernel-debuginfo-common-s390x-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:kernel-debuginfo-common-x86_64-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:kernel-devel-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:kernel-devel-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:kernel-devel-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:kernel-doc-0:3.10.0-123.13.1.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:kernel-headers-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:kernel-headers-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:kernel-headers-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:kernel-kdump-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:kernel-kdump-debuginfo-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:kernel-kdump-devel-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:kernel-tools-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:kernel-tools-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:kernel-tools-debuginfo-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:kernel-tools-debuginfo-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:kernel-tools-libs-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:kernel-tools-libs-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:kernel-tools-libs-devel-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:kernel-tools-libs-devel-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:perf-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:perf-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:perf-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:perf-debuginfo-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:perf-debuginfo-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:perf-debuginfo-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:python-perf-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:python-perf-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:python-perf-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:python-perf-debuginfo-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:python-perf-debuginfo-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:python-perf-debuginfo-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:kernel-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:kernel-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:kernel-0:3.10.0-123.13.1.el7.src	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:kernel-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:kernel-abi-whitelists-0:3.10.0-123.13.1.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:kernel-bootwrapper-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:kernel-debug-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:kernel-debug-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:kernel-debug-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:kernel-debug-debuginfo-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:kernel-debug-debuginfo-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:kernel-debug-debuginfo-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:kernel-debug-devel-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:kernel-debug-devel-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:kernel-debug-devel-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:kernel-debuginfo-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:kernel-debuginfo-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:kernel-debuginfo-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:kernel-debuginfo-common-ppc64-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:kernel-debuginfo-common-s390x-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:kernel-debuginfo-common-x86_64-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:kernel-devel-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:kernel-devel-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:kernel-devel-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:kernel-doc-0:3.10.0-123.13.1.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:kernel-headers-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:kernel-headers-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:kernel-headers-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:kernel-kdump-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:kernel-kdump-debuginfo-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:kernel-kdump-devel-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:kernel-tools-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:kernel-tools-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:kernel-tools-debuginfo-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:kernel-tools-debuginfo-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:kernel-tools-libs-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:kernel-tools-libs-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:kernel-tools-libs-devel-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:kernel-tools-libs-devel-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:perf-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:perf-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:perf-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:perf-debuginfo-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:perf-debuginfo-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:perf-debuginfo-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:python-perf-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:python-perf-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:python-perf-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:python-perf-debuginfo-0:3.10.0-123.13.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:python-perf-debuginfo-0:3.10.0-123.13.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:python-perf-debuginfo-0:3.10.0-123.13.1.el7.x86_64	—	Vendor Fix fix

Threats

Impact Low

CVE-2014-1739

An information leak flaw was found in the way the Linux kernel handled media device enumerate entities IOCTL requests. A local user able to access the /dev/media0 device file could use this flaw to leak kernel memory bytes.

1.7 ()


                
                  AV:L/AC:L/Au:S/C:P/I:N/A:N

Affected products

Fixed 408 products, the same list as for CVE-2013-2929

Threats

Impact Low

CVE-2014-3181

An out-of-bounds write flaw was found in the way the Apple Magic Mouse/Trackpad multi-touch driver handled Human Interface Device (HID) reports with an invalid size. An attacker with physical access to the system could use this flaw to crash the system or, potentially, escalate their privileges on the system.

6.2 ()


                
                  AV:L/AC:H/Au:N/C:C/I:C/A:C

CWE-787 - Out-of-bounds Write

Affected products

Fixed 408 products, the same list as for CVE-2013-2929

Threats

Impact Moderate

CVE-2014-3182

An out-of-bounds read flaw was found in the way the Logitech Unifying receiver driver handled HID reports with an invalid device_index value. An attacker with physical access to the system could use this flaw to crash the system or, potentially, escalate their privileges on the system.

6.2 ()


                
                  AV:L/AC:H/Au:N/C:C/I:C/A:C

Affected products

Fixed 408 products, the same list as for CVE-2013-2929

Threats

Impact Low

CVE-2014-3184

Multiple out-of-bounds write flaws were found in the way the Cherry Cymotion keyboard driver, KYE/Genius device drivers, Logitech device drivers, Monterey Genius KB29E keyboard driver, Petalynx Maxter remote control driver, and Sunplus wireless desktop driver handled HID reports with an invalid report descriptor size. An attacker with physical access to the system could use either of these flaws to write data past an allocated memory buffer.

1.2 ()


                
                  AV:L/AC:H/Au:N/C:N/I:P/A:N

CWE-193 - Off-by-one Error

Affected products

Fixed 408 products, the same list as for CVE-2013-2929

Threats

Impact Low

CVE-2014-3185

A memory corruption flaw was found in the way the USB ConnectTech WhiteHEAT serial driver processed completion commands sent via USB Request Blocks buffers. An attacker with physical access to the system could use this flaw to crash the system or, potentially, escalate their privileges on the system.

6.2 ()


                
                  AV:L/AC:H/Au:N/C:C/I:C/A:C

Affected products

Fixed 408 products, the same list as for CVE-2013-2929

Threats

Impact Moderate

CVE-2014-3186

A buffer overflow flaw was found in the way the Minibox PicoLCD driver handled Human Interface Device (HID) reports with an invalid size. An attacker with physical access to the system could use this flaw to crash the system or, potentially, escalate their privileges on the system.

6.2 ()


                
                  AV:L/AC:H/Au:N/C:C/I:C/A:C

CWE-787 - Out-of-bounds Write

Affected products

Fixed 408 products, the same list as for CVE-2013-2929

Threats

Impact Moderate

CVE-2014-3631

A flaw was found in the way the Linux kernel's keys subsystem handled the termination condition in the associative array garbage collection functionality. A local, unprivileged user could use this flaw to crash the system.

4.9 ()


                
                  AV:L/AC:L/Au:N/C:N/I:N/A:C

Affected products

Fixed 408 products, the same list as for CVE-2013-2929

Threats

Impact Moderate

CVE-2014-3673

A flaw was found in the way the Linux kernel's Stream Control Transmission Protocol (SCTP) implementation handled malformed Address Configuration Change Chunks (ASCONF). A remote attacker could use either of these flaws to crash the system.

7.1 ()


                
                  AV:N/AC:M/Au:N/C:N/I:N/A:C

CWE-20 - Improper Input Validation

Affected products

Fixed 408 products, the same list as for CVE-2013-2929

Threats

Impact Important

CVE-2014-3687

A flaw was found in the way the Linux kernel's Stream Control Transmission Protocol (SCTP) implementation handled duplicate Address Configuration Change Chunks (ASCONF). A remote attacker could use either of these flaws to crash the system.

7.1 ()


                
                  AV:N/AC:M/Au:N/C:N/I:N/A:C

Affected products

Fixed 408 products, the same list as for CVE-2013-2929

Threats

Impact Important

CVE-2014-3688

A flaw was found in the way the Linux kernel's Stream Control Transmission Protocol (SCTP) implementation handled the association's output queue. A remote attacker could send specially crafted packets that would cause the system to use an excessive amount of memory, leading to a denial of service.

7.1 ()


                
                  AV:N/AC:M/Au:N/C:N/I:N/A:C

Affected products

Fixed 408 products, the same list as for CVE-2013-2929

Threats

Impact Important

CVE-2014-4027

An information leak flaw was found in the RAM Disks Memory Copy (rd_mcp) backend driver of the iSCSI Target subsystem of the Linux kernel. A privileged user could use this flaw to leak the contents of kernel memory to an iSCSI initiator remote client.

2.3 ()


                
                  AV:A/AC:M/Au:S/C:P/I:N/A:N

Affected products

Fixed 408 products, the same list as for CVE-2013-2929

Threats

Impact Low

CVE-2014-4652

An information leak flaw was found in the way the Linux kernel's Advanced Linux Sound Architecture (ALSA) implementation handled access of the user control's state. A local, privileged user could use this flaw to leak kernel memory to user space.

1.5 ()


                
                  AV:L/AC:M/Au:S/C:P/I:N/A:N

Affected products

Fixed 408 products, the same list as for CVE-2013-2929

Threats

Impact Low

CVE-2014-4654

A use-after-free flaw was found in the way the Linux kernel's Advanced Linux Sound Architecture (ALSA) implementation handled user controls. A local, privileged user could use this flaw to crash the system.

3.8 ()


                
                  AV:L/AC:H/Au:S/C:N/I:N/A:C

CWE-416 - Use After Free

Affected products

Fixed 408 products, the same list as for CVE-2013-2929

Threats

Impact Moderate

CVE-2014-4655

3.8 ()


                
                  AV:L/AC:H/Au:S/C:N/I:N/A:C

CWE-416 - Use After Free

Affected products

Fixed 408 products, the same list as for CVE-2013-2929

Threats

Impact Moderate

CVE-2014-4656

An integer overflow flaw was found in the way the Linux kernel's Advanced Linux Sound Architecture (ALSA) implementation handled user controls. A local, privileged user could use this flaw to crash the system.

5.0 ()


                
                  AV:L/AC:M/Au:S/C:N/I:P/A:C

CWE-190 - Integer Overflow or Wraparound

Affected products

Fixed 408 products, the same list as for CVE-2013-2929

Threats

Impact Moderate

CVE-2014-5045

A flaw was found in the way the Linux kernel's VFS subsystem handled reference counting when performing unmount operations on symbolic links. A local, unprivileged user could use this flaw to exhaust all available memory on the system or, potentially, trigger a use-after-free error, resulting in a system crash or privilege escalation.

6.0 ()


                
                  AV:L/AC:H/Au:S/C:C/I:C/A:C

Affected products

Fixed 408 products, the same list as for CVE-2013-2929

Threats

Impact Moderate

CVE-2014-6410

A stack overflow flaw caused by infinite recursion was found in the way the Linux kernel's Universal Disk Format (UDF) file system implementation processed indirect Information Control Blocks (ICBs). An attacker with physical access to the system could use a specially crafted UDF image to crash the system.

4.9 ()


                
                  AV:L/AC:L/Au:N/C:N/I:N/A:C

CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')

Affected products

Fixed 408 products, the same list as for CVE-2013-2929

Threats

Impact Low

References

91 references

URL	Category
https://access.redhat.com/errata/RHSA-2014:1971	self
https://access.redhat.com/security/updates/classi…	external
https://bugzilla.redhat.com/show_bug.cgi?id=1028148	external
https://bugzilla.redhat.com/show_bug.cgi?id=1108744	external
https://bugzilla.redhat.com/show_bug.cgi?id=1109774	external
https://bugzilla.redhat.com/show_bug.cgi?id=1113406	external
https://bugzilla.redhat.com/show_bug.cgi?id=1113445	external
https://bugzilla.redhat.com/show_bug.cgi?id=1113470	external
https://bugzilla.redhat.com/show_bug.cgi?id=1122472	external
https://bugzilla.redhat.com/show_bug.cgi?id=1140325	external
https://bugzilla.redhat.com/show_bug.cgi?id=1141173	external
https://bugzilla.redhat.com/show_bug.cgi?id=1141210	external
https://bugzilla.redhat.com/show_bug.cgi?id=1141391	external
https://bugzilla.redhat.com/show_bug.cgi?id=1141400	external
https://bugzilla.redhat.com/show_bug.cgi?id=1141407	external
https://bugzilla.redhat.com/show_bug.cgi?id=1141809	external
https://bugzilla.redhat.com/show_bug.cgi?id=1147850	external
https://bugzilla.redhat.com/show_bug.cgi?id=1155731	external
https://bugzilla.redhat.com/show_bug.cgi?id=1155745	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2013-2929	self
https://bugzilla.redhat.com/show_bug.cgi?id=1028148	external
https://www.cve.org/CVERecord?id=CVE-2013-2929	external
https://nvd.nist.gov/vuln/detail/CVE-2013-2929	external
https://access.redhat.com/security/cve/CVE-2014-1739	self
https://bugzilla.redhat.com/show_bug.cgi?id=1109774	external
https://www.cve.org/CVERecord?id=CVE-2014-1739	external
https://nvd.nist.gov/vuln/detail/CVE-2014-1739	external
https://access.redhat.com/security/cve/CVE-2014-3181	self
https://bugzilla.redhat.com/show_bug.cgi?id=1141173	external
https://www.cve.org/CVERecord?id=CVE-2014-3181	external
https://nvd.nist.gov/vuln/detail/CVE-2014-3181	external
https://access.redhat.com/security/cve/CVE-2014-3182	self
https://bugzilla.redhat.com/show_bug.cgi?id=1141210	external
https://www.cve.org/CVERecord?id=CVE-2014-3182	external
https://nvd.nist.gov/vuln/detail/CVE-2014-3182	external
https://access.redhat.com/security/cve/CVE-2014-3184	self
https://bugzilla.redhat.com/show_bug.cgi?id=1141391	external
https://www.cve.org/CVERecord?id=CVE-2014-3184	external
https://nvd.nist.gov/vuln/detail/CVE-2014-3184	external
https://access.redhat.com/security/cve/CVE-2014-3185	self
https://bugzilla.redhat.com/show_bug.cgi?id=1141400	external
https://www.cve.org/CVERecord?id=CVE-2014-3185	external
https://nvd.nist.gov/vuln/detail/CVE-2014-3185	external
https://access.redhat.com/security/cve/CVE-2014-3186	self
https://bugzilla.redhat.com/show_bug.cgi?id=1141407	external
https://www.cve.org/CVERecord?id=CVE-2014-3186	external
https://nvd.nist.gov/vuln/detail/CVE-2014-3186	external
https://access.redhat.com/security/cve/CVE-2014-3631	self
https://bugzilla.redhat.com/show_bug.cgi?id=1140325	external
https://www.cve.org/CVERecord?id=CVE-2014-3631	external
https://nvd.nist.gov/vuln/detail/CVE-2014-3631	external
https://access.redhat.com/security/cve/CVE-2014-3673	self
https://bugzilla.redhat.com/show_bug.cgi?id=1147850	external
https://www.cve.org/CVERecord?id=CVE-2014-3673	external
https://nvd.nist.gov/vuln/detail/CVE-2014-3673	external
https://access.redhat.com/security/cve/CVE-2014-3687	self
https://bugzilla.redhat.com/show_bug.cgi?id=1155731	external
https://www.cve.org/CVERecord?id=CVE-2014-3687	external
https://nvd.nist.gov/vuln/detail/CVE-2014-3687	external
https://access.redhat.com/security/cve/CVE-2014-3688	self
https://bugzilla.redhat.com/show_bug.cgi?id=1155745	external
https://www.cve.org/CVERecord?id=CVE-2014-3688	external
https://nvd.nist.gov/vuln/detail/CVE-2014-3688	external
https://access.redhat.com/security/cve/CVE-2014-4027	self
https://bugzilla.redhat.com/show_bug.cgi?id=1108744	external
https://www.cve.org/CVERecord?id=CVE-2014-4027	external
https://nvd.nist.gov/vuln/detail/CVE-2014-4027	external
https://access.redhat.com/security/cve/CVE-2014-4652	self
https://bugzilla.redhat.com/show_bug.cgi?id=1113406	external
https://www.cve.org/CVERecord?id=CVE-2014-4652	external
https://nvd.nist.gov/vuln/detail/CVE-2014-4652	external
https://access.redhat.com/security/cve/CVE-2014-4654	self
https://bugzilla.redhat.com/show_bug.cgi?id=1113445	external
https://www.cve.org/CVERecord?id=CVE-2014-4654	external
https://nvd.nist.gov/vuln/detail/CVE-2014-4654	external
https://access.redhat.com/security/cve/CVE-2014-4655	self
https://www.cve.org/CVERecord?id=CVE-2014-4655	external
https://nvd.nist.gov/vuln/detail/CVE-2014-4655	external
https://access.redhat.com/security/cve/CVE-2014-4656	self
https://bugzilla.redhat.com/show_bug.cgi?id=1113470	external
https://www.cve.org/CVERecord?id=CVE-2014-4656	external
https://nvd.nist.gov/vuln/detail/CVE-2014-4656	external
https://access.redhat.com/security/cve/CVE-2014-5045	self
https://bugzilla.redhat.com/show_bug.cgi?id=1122472	external
https://www.cve.org/CVERecord?id=CVE-2014-5045	external
https://nvd.nist.gov/vuln/detail/CVE-2014-5045	external
https://access.redhat.com/security/cve/CVE-2014-6410	self
https://bugzilla.redhat.com/show_bug.cgi?id=1141809	external
https://www.cve.org/CVERecord?id=CVE-2014-6410	external
https://nvd.nist.gov/vuln/detail/CVE-2014-6410	external

Acknowledgments

Frey Alfredsson

Red Hat Liu Wei

Parallels Vasily Averin

JSON

To clipboard

Loading 2.0 MB of JSON…

CVE-2014-3688 (GCVE-0-2014-3688)

Vulnerability from cvelistv5 – Published: 2014-11-30 01:00 – Updated: 2024-08-06 10:50

Summary

The SCTP implementation in the Linux kernel before 3.17.4 allows remote attackers to cause a denial of service (memory consumption) by triggering a large number of chunks in an association's output queue, as demonstrated by ASCONF probes, related to net/sctp/inqueue.c and net/sctp/sm_statefuns.c.

Severity

No CVSS data available.

CWE

Assigner

redhat redhat root

References

16 references

URL	Tags
http://www.openwall.com/lists/oss-security/2014/11/13/8	mailing-listx_refsource_MLIST
http://marc.info/?l=bugtraq&m=142722450701342&w=2	vendor-advisoryx_refsource_HP
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.ubuntu.com/usn/USN-2418-1	vendor-advisoryx_refsource_UBUNTU
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://rhn.redhat.com/errata/RHSA-2015-0062.html	vendor-advisoryx_refsource_REDHAT
http://www.ubuntu.com/usn/USN-2417-1	vendor-advisoryx_refsource_UBUNTU
http://marc.info/?l=bugtraq&m=142722544401658&w=2	vendor-advisoryx_refsource_HP
http://www.debian.org/security/2014/dsa-3060	vendor-advisoryx_refsource_DEBIAN
https://github.com/torvalds/linux/commit/26b87c78…	x_refsource_CONFIRM
http://git.kernel.org/?p=linux/kernel/git/torvald…	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://bugzilla.redhat.com/show_bug.cgi?id=1155745	x_refsource_CONFIRM
http://www.kernel.org/pub/linux/kernel/v3.x/Chang…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2015-0115.html	vendor-advisoryx_refsource_REDHAT

Date Public

2014-11-13 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T10:50:18.333Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[oss-security] 20141113 Linux kernel: SCTP issues",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2014/11/13/8"
          },
          {
            "name": "HPSBGN03285",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142722450701342\u0026w=2"
          },
          {
            "name": "SUSE-SU-2015:0736",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html"
          },
          {
            "name": "USN-2418-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2418-1"
          },
          {
            "name": "SUSE-SU-2015:0652",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00000.html"
          },
          {
            "name": "RHSA-2015:0062",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0062.html"
          },
          {
            "name": "USN-2417-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2417-1"
          },
          {
            "name": "HPSBGN03282",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142722544401658\u0026w=2"
          },
          {
            "name": "DSA-3060",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-3060"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/26b87c7881006311828bb0ab271a551a62dcceb4"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=26b87c7881006311828bb0ab271a551a62dcceb4"
          },
          {
            "name": "SUSE-SU-2015:0481",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html"
          },
          {
            "name": "openSUSE-SU-2015:0566",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1155745"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.17.4"
          },
          {
            "name": "RHSA-2015:0115",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0115.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-11-13T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The SCTP implementation in the Linux kernel before 3.17.4 allows remote attackers to cause a denial of service (memory consumption) by triggering a large number of chunks in an association\u0027s output queue, as demonstrated by ASCONF probes, related to net/sctp/inqueue.c and net/sctp/sm_statefuns.c."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-08-19T15:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "[oss-security] 20141113 Linux kernel: SCTP issues",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2014/11/13/8"
        },
        {
          "name": "HPSBGN03285",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142722450701342\u0026w=2"
        },
        {
          "name": "SUSE-SU-2015:0736",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html"
        },
        {
          "name": "USN-2418-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2418-1"
        },
        {
          "name": "SUSE-SU-2015:0652",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00000.html"
        },
        {
          "name": "RHSA-2015:0062",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0062.html"
        },
        {
          "name": "USN-2417-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2417-1"
        },
        {
          "name": "HPSBGN03282",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142722544401658\u0026w=2"
        },
        {
          "name": "DSA-3060",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-3060"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/torvalds/linux/commit/26b87c7881006311828bb0ab271a551a62dcceb4"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=26b87c7881006311828bb0ab271a551a62dcceb4"
        },
        {
          "name": "SUSE-SU-2015:0481",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html"
        },
        {
          "name": "openSUSE-SU-2015:0566",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1155745"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.17.4"
        },
        {
          "name": "RHSA-2015:0115",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0115.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2014-3688",
    "datePublished": "2014-11-30T01:00:00.000Z",
    "dateReserved": "2014-05-14T00:00:00.000Z",
    "dateUpdated": "2024-08-06T10:50:18.333Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2014-4027 (GCVE-0-2014-4027)

Vulnerability from cvelistv5 – Published: 2014-06-23 10:00 – Updated: 2024-08-06 11:04

Summary

The rd_build_device_space function in drivers/target/target_core_rd.c in the Linux kernel before 3.14 does not properly initialize a certain data structure, which allows local users to obtain sensitive information from ramdisk_mcp memory by leveraging access to a SCSI initiator.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

14 references

URL	Tags
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://secunia.com/advisories/59134	third-party-advisoryx_refsource_SECUNIA
https://support.f5.com/kb/en-us/solutions/public/…	x_refsource_CONFIRM
https://bugzilla.redhat.com/show_bug.cgi?id=1108744	x_refsource_CONFIRM
http://www.ubuntu.com/usn/USN-2335-1	vendor-advisoryx_refsource_UBUNTU
http://www.ubuntu.com/usn/USN-2334-1	vendor-advisoryx_refsource_UBUNTU
http://git.kernel.org/?p=linux/kernel/git/torvald…	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://secunia.com/advisories/60564	third-party-advisoryx_refsource_SECUNIA
https://github.com/torvalds/linux/commit/4442dc8a…	x_refsource_CONFIRM
http://secunia.com/advisories/59777	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/61310	third-party-advisoryx_refsource_SECUNIA
http://www.openwall.com/lists/oss-security/2014/06/11/1	mailing-listx_refsource_MLIST
http://permalink.gmane.org/gmane.linux.scsi.targe…	mailing-listx_refsource_MLIST

Date Public

2014-06-11 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T11:04:27.539Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "SUSE-SU-2014:1316",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00006.html"
          },
          {
            "name": "59134",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59134"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.f5.com/kb/en-us/solutions/public/15000/600/sol15685.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1108744"
          },
          {
            "name": "USN-2335-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2335-1"
          },
          {
            "name": "USN-2334-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2334-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=4442dc8a92b8f9ad8ee9e7f8438f4c04c03a22dc"
          },
          {
            "name": "SUSE-SU-2014:1319",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00007.html"
          },
          {
            "name": "60564",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/60564"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/4442dc8a92b8f9ad8ee9e7f8438f4c04c03a22dc"
          },
          {
            "name": "59777",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59777"
          },
          {
            "name": "61310",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/61310"
          },
          {
            "name": "[oss-security] 20140611 Re: CVE request: Linux kernel / target information leak",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2014/06/11/1"
          },
          {
            "name": "[target-devel] 20140616 [PATCH] target: Explicitly clear ramdisk_mcp backend pages",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://permalink.gmane.org/gmane.linux.scsi.target.devel/6618"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-06-11T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The rd_build_device_space function in drivers/target/target_core_rd.c in the Linux kernel before 3.14 does not properly initialize a certain data structure, which allows local users to obtain sensitive information from ramdisk_mcp memory by leveraging access to a SCSI initiator."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-01-05T14:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "SUSE-SU-2014:1316",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00006.html"
        },
        {
          "name": "59134",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59134"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.f5.com/kb/en-us/solutions/public/15000/600/sol15685.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1108744"
        },
        {
          "name": "USN-2335-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2335-1"
        },
        {
          "name": "USN-2334-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2334-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=4442dc8a92b8f9ad8ee9e7f8438f4c04c03a22dc"
        },
        {
          "name": "SUSE-SU-2014:1319",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00007.html"
        },
        {
          "name": "60564",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/60564"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/torvalds/linux/commit/4442dc8a92b8f9ad8ee9e7f8438f4c04c03a22dc"
        },
        {
          "name": "59777",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59777"
        },
        {
          "name": "61310",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/61310"
        },
        {
          "name": "[oss-security] 20140611 Re: CVE request: Linux kernel / target information leak",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2014/06/11/1"
        },
        {
          "name": "[target-devel] 20140616 [PATCH] target: Explicitly clear ramdisk_mcp backend pages",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://permalink.gmane.org/gmane.linux.scsi.target.devel/6618"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2014-4027",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The rd_build_device_space function in drivers/target/target_core_rd.c in the Linux kernel before 3.14 does not properly initialize a certain data structure, which allows local users to obtain sensitive information from ramdisk_mcp memory by leveraging access to a SCSI initiator."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "SUSE-SU-2014:1316",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00006.html"
            },
            {
              "name": "59134",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59134"
            },
            {
              "name": "https://support.f5.com/kb/en-us/solutions/public/15000/600/sol15685.html",
              "refsource": "CONFIRM",
              "url": "https://support.f5.com/kb/en-us/solutions/public/15000/600/sol15685.html"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1108744",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1108744"
            },
            {
              "name": "USN-2335-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2335-1"
            },
            {
              "name": "USN-2334-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2334-1"
            },
            {
              "name": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=4442dc8a92b8f9ad8ee9e7f8438f4c04c03a22dc",
              "refsource": "CONFIRM",
              "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=4442dc8a92b8f9ad8ee9e7f8438f4c04c03a22dc"
            },
            {
              "name": "SUSE-SU-2014:1319",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00007.html"
            },
            {
              "name": "60564",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/60564"
            },
            {
              "name": "https://github.com/torvalds/linux/commit/4442dc8a92b8f9ad8ee9e7f8438f4c04c03a22dc",
              "refsource": "CONFIRM",
              "url": "https://github.com/torvalds/linux/commit/4442dc8a92b8f9ad8ee9e7f8438f4c04c03a22dc"
            },
            {
              "name": "59777",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59777"
            },
            {
              "name": "61310",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/61310"
            },
            {
              "name": "[oss-security] 20140611 Re: CVE request: Linux kernel / target information leak",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2014/06/11/1"
            },
            {
              "name": "[target-devel] 20140616 [PATCH] target: Explicitly clear ramdisk_mcp backend pages",
              "refsource": "MLIST",
              "url": "http://permalink.gmane.org/gmane.linux.scsi.target.devel/6618"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2014-4027",
    "datePublished": "2014-06-23T10:00:00.000Z",
    "dateReserved": "2014-06-11T00:00:00.000Z",
    "dateUpdated": "2024-08-06T11:04:27.539Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2014-4652 (GCVE-0-2014-4652)

Vulnerability from cvelistv5 – Published: 2014-07-03 01:00 – Updated: 2024-08-06 11:20

Summary

Race condition in the tlv handler functionality in the snd_ctl_elem_user_tlv function in sound/core/control.c in the ALSA control implementation in the Linux kernel before 3.15.2 allows local users to obtain sensitive information from kernel memory by leveraging /dev/snd/controlCX access.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

15 references

URL	Tags
http://secunia.com/advisories/60545	third-party-advisoryx_refsource_SECUNIA
https://bugzilla.redhat.com/show_bug.cgi?id=1113406	x_refsource_CONFIRM
https://github.com/torvalds/linux/commit/07f4d9d7…	x_refsource_CONFIRM
http://www.ubuntu.com/usn/USN-2335-1	vendor-advisoryx_refsource_UBUNTU
http://www.ubuntu.com/usn/USN-2334-1	vendor-advisoryx_refsource_UBUNTU
http://secunia.com/advisories/60564	third-party-advisoryx_refsource_SECUNIA
http://rhn.redhat.com/errata/RHSA-2014-1083.html	vendor-advisoryx_refsource_REDHAT
http://secunia.com/advisories/59777	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/59434	third-party-advisoryx_refsource_SECUNIA
http://www.kernel.org/pub/linux/kernel/v3.x/Chang…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2015-1272.html	vendor-advisoryx_refsource_REDHAT
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
http://git.kernel.org/?p=linux/kernel/git/torvald…	x_refsource_CONFIRM
http://www.openwall.com/lists/oss-security/2014/06/26/6	mailing-listx_refsource_MLIST
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE

Date Public

2014-06-18 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T11:20:26.691Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "60545",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/60545"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1113406"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/07f4d9d74a04aa7c72c5dae0ef97565f28f17b92"
          },
          {
            "name": "USN-2335-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2335-1"
          },
          {
            "name": "USN-2334-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2334-1"
          },
          {
            "name": "60564",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/60564"
          },
          {
            "name": "RHSA-2014:1083",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1083.html"
          },
          {
            "name": "59777",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59777"
          },
          {
            "name": "59434",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59434"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.15.2"
          },
          {
            "name": "RHSA-2015:1272",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1272.html"
          },
          {
            "name": "linux-kernel-cve20144652-info-disc(94412)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/94412"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=07f4d9d74a04aa7c72c5dae0ef97565f28f17b92"
          },
          {
            "name": "[oss-security] 20140626 Re: CVE Request: Linux kernel ALSA core control API vulnerabilities",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2014/06/26/6"
          },
          {
            "name": "SUSE-SU-2015:0812",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-06-18T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Race condition in the tlv handler functionality in the snd_ctl_elem_user_tlv function in sound/core/control.c in the ALSA control implementation in the Linux kernel before 3.15.2 allows local users to obtain sensitive information from kernel memory by leveraging /dev/snd/controlCX access."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-08-28T12:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "60545",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/60545"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1113406"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/torvalds/linux/commit/07f4d9d74a04aa7c72c5dae0ef97565f28f17b92"
        },
        {
          "name": "USN-2335-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2335-1"
        },
        {
          "name": "USN-2334-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2334-1"
        },
        {
          "name": "60564",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/60564"
        },
        {
          "name": "RHSA-2014:1083",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-1083.html"
        },
        {
          "name": "59777",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59777"
        },
        {
          "name": "59434",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59434"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.15.2"
        },
        {
          "name": "RHSA-2015:1272",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1272.html"
        },
        {
          "name": "linux-kernel-cve20144652-info-disc(94412)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/94412"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=07f4d9d74a04aa7c72c5dae0ef97565f28f17b92"
        },
        {
          "name": "[oss-security] 20140626 Re: CVE Request: Linux kernel ALSA core control API vulnerabilities",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2014/06/26/6"
        },
        {
          "name": "SUSE-SU-2015:0812",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2014-4652",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Race condition in the tlv handler functionality in the snd_ctl_elem_user_tlv function in sound/core/control.c in the ALSA control implementation in the Linux kernel before 3.15.2 allows local users to obtain sensitive information from kernel memory by leveraging /dev/snd/controlCX access."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "60545",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/60545"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1113406",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1113406"
            },
            {
              "name": "https://github.com/torvalds/linux/commit/07f4d9d74a04aa7c72c5dae0ef97565f28f17b92",
              "refsource": "CONFIRM",
              "url": "https://github.com/torvalds/linux/commit/07f4d9d74a04aa7c72c5dae0ef97565f28f17b92"
            },
            {
              "name": "USN-2335-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2335-1"
            },
            {
              "name": "USN-2334-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2334-1"
            },
            {
              "name": "60564",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/60564"
            },
            {
              "name": "RHSA-2014:1083",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-1083.html"
            },
            {
              "name": "59777",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59777"
            },
            {
              "name": "59434",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59434"
            },
            {
              "name": "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.15.2",
              "refsource": "CONFIRM",
              "url": "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.15.2"
            },
            {
              "name": "RHSA-2015:1272",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1272.html"
            },
            {
              "name": "linux-kernel-cve20144652-info-disc(94412)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/94412"
            },
            {
              "name": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=07f4d9d74a04aa7c72c5dae0ef97565f28f17b92",
              "refsource": "CONFIRM",
              "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=07f4d9d74a04aa7c72c5dae0ef97565f28f17b92"
            },
            {
              "name": "[oss-security] 20140626 Re: CVE Request: Linux kernel ALSA core control API vulnerabilities",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2014/06/26/6"
            },
            {
              "name": "SUSE-SU-2015:0812",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2014-4652",
    "datePublished": "2014-07-03T01:00:00.000Z",
    "dateReserved": "2014-06-25T00:00:00.000Z",
    "dateUpdated": "2024-08-06T11:20:26.691Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2014-4654 (GCVE-0-2014-4654)

Vulnerability from cvelistv5 – Published: 2014-07-03 01:00 – Updated: 2024-08-06 11:20

Summary

The snd_ctl_elem_add function in sound/core/control.c in the ALSA control implementation in the Linux kernel before 3.15.2 does not check authorization for SNDRV_CTL_IOCTL_ELEM_REPLACE commands, which allows local users to remove kernel controls and cause a denial of service (use-after-free and system crash) by leveraging /dev/snd/controlCX access for an ioctl call.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

14 references

URL	Tags
http://secunia.com/advisories/60545	third-party-advisoryx_refsource_SECUNIA
http://www.ubuntu.com/usn/USN-2335-1	vendor-advisoryx_refsource_UBUNTU
http://www.ubuntu.com/usn/USN-2334-1	vendor-advisoryx_refsource_UBUNTU
http://www.securityfocus.com/bid/68162	vdb-entryx_refsource_BID
http://secunia.com/advisories/60564	third-party-advisoryx_refsource_SECUNIA
http://rhn.redhat.com/errata/RHSA-2014-1083.html	vendor-advisoryx_refsource_REDHAT
http://secunia.com/advisories/59777	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/59434	third-party-advisoryx_refsource_SECUNIA
http://www.kernel.org/pub/linux/kernel/v3.x/Chang…	x_refsource_CONFIRM
https://bugzilla.redhat.com/show_bug.cgi?id=1113445	x_refsource_CONFIRM
https://github.com/torvalds/linux/commit/82262a46…	x_refsource_CONFIRM
http://www.openwall.com/lists/oss-security/2014/06/26/6	mailing-listx_refsource_MLIST
http://git.kernel.org/?p=linux/kernel/git/torvald…	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE

Date Public

2014-06-26 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T11:20:26.676Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "60545",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/60545"
          },
          {
            "name": "USN-2335-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2335-1"
          },
          {
            "name": "USN-2334-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2334-1"
          },
          {
            "name": "68162",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/68162"
          },
          {
            "name": "60564",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/60564"
          },
          {
            "name": "RHSA-2014:1083",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1083.html"
          },
          {
            "name": "59777",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59777"
          },
          {
            "name": "59434",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59434"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.15.2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1113445"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/82262a46627bebb0febcc26664746c25cef08563"
          },
          {
            "name": "[oss-security] 20140626 Re: CVE Request: Linux kernel ALSA core control API vulnerabilities",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2014/06/26/6"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=82262a46627bebb0febcc26664746c25cef08563"
          },
          {
            "name": "SUSE-SU-2015:0812",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-06-26T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The snd_ctl_elem_add function in sound/core/control.c in the ALSA control implementation in the Linux kernel before 3.15.2 does not check authorization for SNDRV_CTL_IOCTL_ELEM_REPLACE commands, which allows local users to remove kernel controls and cause a denial of service (use-after-free and system crash) by leveraging /dev/snd/controlCX access for an ioctl call."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-01-04T20:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "60545",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/60545"
        },
        {
          "name": "USN-2335-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2335-1"
        },
        {
          "name": "USN-2334-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2334-1"
        },
        {
          "name": "68162",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/68162"
        },
        {
          "name": "60564",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/60564"
        },
        {
          "name": "RHSA-2014:1083",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-1083.html"
        },
        {
          "name": "59777",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59777"
        },
        {
          "name": "59434",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59434"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.15.2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1113445"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/torvalds/linux/commit/82262a46627bebb0febcc26664746c25cef08563"
        },
        {
          "name": "[oss-security] 20140626 Re: CVE Request: Linux kernel ALSA core control API vulnerabilities",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2014/06/26/6"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=82262a46627bebb0febcc26664746c25cef08563"
        },
        {
          "name": "SUSE-SU-2015:0812",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2014-4654",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The snd_ctl_elem_add function in sound/core/control.c in the ALSA control implementation in the Linux kernel before 3.15.2 does not check authorization for SNDRV_CTL_IOCTL_ELEM_REPLACE commands, which allows local users to remove kernel controls and cause a denial of service (use-after-free and system crash) by leveraging /dev/snd/controlCX access for an ioctl call."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "60545",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/60545"
            },
            {
              "name": "USN-2335-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2335-1"
            },
            {
              "name": "USN-2334-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2334-1"
            },
            {
              "name": "68162",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/68162"
            },
            {
              "name": "60564",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/60564"
            },
            {
              "name": "RHSA-2014:1083",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-1083.html"
            },
            {
              "name": "59777",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59777"
            },
            {
              "name": "59434",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59434"
            },
            {
              "name": "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.15.2",
              "refsource": "CONFIRM",
              "url": "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.15.2"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1113445",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1113445"
            },
            {
              "name": "https://github.com/torvalds/linux/commit/82262a46627bebb0febcc26664746c25cef08563",
              "refsource": "CONFIRM",
              "url": "https://github.com/torvalds/linux/commit/82262a46627bebb0febcc26664746c25cef08563"
            },
            {
              "name": "[oss-security] 20140626 Re: CVE Request: Linux kernel ALSA core control API vulnerabilities",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2014/06/26/6"
            },
            {
              "name": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=82262a46627bebb0febcc26664746c25cef08563",
              "refsource": "CONFIRM",
              "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=82262a46627bebb0febcc26664746c25cef08563"
            },
            {
              "name": "SUSE-SU-2015:0812",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2014-4654",
    "datePublished": "2014-07-03T01:00:00.000Z",
    "dateReserved": "2014-06-25T00:00:00.000Z",
    "dateUpdated": "2024-08-06T11:20:26.676Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2014-4655 (GCVE-0-2014-4655)

Vulnerability from cvelistv5 – Published: 2014-07-03 01:00 – Updated: 2024-08-06 11:20

Summary

The snd_ctl_elem_add function in sound/core/control.c in the ALSA control implementation in the Linux kernel before 3.15.2 does not properly maintain the user_ctl_count value, which allows local users to cause a denial of service (integer overflow and limit bypass) by leveraging /dev/snd/controlCX access for a large number of SNDRV_CTL_IOCTL_ELEM_REPLACE ioctl calls.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

15 references

URL	Tags
http://secunia.com/advisories/60545	third-party-advisoryx_refsource_SECUNIA
http://www.ubuntu.com/usn/USN-2335-1	vendor-advisoryx_refsource_UBUNTU
http://www.ubuntu.com/usn/USN-2334-1	vendor-advisoryx_refsource_UBUNTU
http://www.securityfocus.com/bid/68162	vdb-entryx_refsource_BID
http://secunia.com/advisories/60564	third-party-advisoryx_refsource_SECUNIA
http://rhn.redhat.com/errata/RHSA-2014-1083.html	vendor-advisoryx_refsource_REDHAT
http://www.securitytracker.com/id/1036763	vdb-entryx_refsource_SECTRACK
http://secunia.com/advisories/59777	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/59434	third-party-advisoryx_refsource_SECUNIA
http://www.kernel.org/pub/linux/kernel/v3.x/Chang…	x_refsource_CONFIRM
https://bugzilla.redhat.com/show_bug.cgi?id=1113445	x_refsource_CONFIRM
https://github.com/torvalds/linux/commit/82262a46…	x_refsource_CONFIRM
http://www.openwall.com/lists/oss-security/2014/06/26/6	mailing-listx_refsource_MLIST
http://git.kernel.org/?p=linux/kernel/git/torvald…	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE

Date Public

2014-06-26 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T11:20:26.669Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "60545",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/60545"
          },
          {
            "name": "USN-2335-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2335-1"
          },
          {
            "name": "USN-2334-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2334-1"
          },
          {
            "name": "68162",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/68162"
          },
          {
            "name": "60564",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/60564"
          },
          {
            "name": "RHSA-2014:1083",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1083.html"
          },
          {
            "name": "1036763",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1036763"
          },
          {
            "name": "59777",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59777"
          },
          {
            "name": "59434",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59434"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.15.2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1113445"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/82262a46627bebb0febcc26664746c25cef08563"
          },
          {
            "name": "[oss-security] 20140626 Re: CVE Request: Linux kernel ALSA core control API vulnerabilities",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2014/06/26/6"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=82262a46627bebb0febcc26664746c25cef08563"
          },
          {
            "name": "SUSE-SU-2015:0812",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-06-26T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The snd_ctl_elem_add function in sound/core/control.c in the ALSA control implementation in the Linux kernel before 3.15.2 does not properly maintain the user_ctl_count value, which allows local users to cause a denial of service (integer overflow and limit bypass) by leveraging /dev/snd/controlCX access for a large number of SNDRV_CTL_IOCTL_ELEM_REPLACE ioctl calls."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-08-12T09:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "60545",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/60545"
        },
        {
          "name": "USN-2335-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2335-1"
        },
        {
          "name": "USN-2334-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2334-1"
        },
        {
          "name": "68162",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/68162"
        },
        {
          "name": "60564",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/60564"
        },
        {
          "name": "RHSA-2014:1083",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-1083.html"
        },
        {
          "name": "1036763",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1036763"
        },
        {
          "name": "59777",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59777"
        },
        {
          "name": "59434",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59434"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.15.2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1113445"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/torvalds/linux/commit/82262a46627bebb0febcc26664746c25cef08563"
        },
        {
          "name": "[oss-security] 20140626 Re: CVE Request: Linux kernel ALSA core control API vulnerabilities",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2014/06/26/6"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=82262a46627bebb0febcc26664746c25cef08563"
        },
        {
          "name": "SUSE-SU-2015:0812",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2014-4655",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The snd_ctl_elem_add function in sound/core/control.c in the ALSA control implementation in the Linux kernel before 3.15.2 does not properly maintain the user_ctl_count value, which allows local users to cause a denial of service (integer overflow and limit bypass) by leveraging /dev/snd/controlCX access for a large number of SNDRV_CTL_IOCTL_ELEM_REPLACE ioctl calls."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "60545",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/60545"
            },
            {
              "name": "USN-2335-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2335-1"
            },
            {
              "name": "USN-2334-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2334-1"
            },
            {
              "name": "68162",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/68162"
            },
            {
              "name": "60564",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/60564"
            },
            {
              "name": "RHSA-2014:1083",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-1083.html"
            },
            {
              "name": "1036763",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1036763"
            },
            {
              "name": "59777",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59777"
            },
            {
              "name": "59434",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59434"
            },
            {
              "name": "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.15.2",
              "refsource": "CONFIRM",
              "url": "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.15.2"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1113445",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1113445"
            },
            {
              "name": "https://github.com/torvalds/linux/commit/82262a46627bebb0febcc26664746c25cef08563",
              "refsource": "CONFIRM",
              "url": "https://github.com/torvalds/linux/commit/82262a46627bebb0febcc26664746c25cef08563"
            },
            {
              "name": "[oss-security] 20140626 Re: CVE Request: Linux kernel ALSA core control API vulnerabilities",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2014/06/26/6"
            },
            {
              "name": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=82262a46627bebb0febcc26664746c25cef08563",
              "refsource": "CONFIRM",
              "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=82262a46627bebb0febcc26664746c25cef08563"
            },
            {
              "name": "SUSE-SU-2015:0812",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2014-4655",
    "datePublished": "2014-07-03T01:00:00.000Z",
    "dateReserved": "2014-06-25T00:00:00.000Z",
    "dateUpdated": "2024-08-06T11:20:26.669Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2014-4656 (GCVE-0-2014-4656)

Vulnerability from cvelistv5 – Published: 2014-07-03 01:00 – Updated: 2024-08-06 11:20

Summary

Multiple integer overflows in sound/core/control.c in the ALSA control implementation in the Linux kernel before 3.15.2 allow local users to cause a denial of service by leveraging /dev/snd/controlCX access, related to (1) index values in the snd_ctl_add function and (2) numid values in the snd_ctl_remove_numid_conflict function.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

18 references

URL	Tags
http://secunia.com/advisories/60545	third-party-advisoryx_refsource_SECUNIA
https://source.android.com/security/bulletin/2017-04-01	x_refsource_CONFIRM
https://github.com/torvalds/linux/commit/ac902c11…	x_refsource_CONFIRM
http://www.ubuntu.com/usn/USN-2335-1	vendor-advisoryx_refsource_UBUNTU
http://rhn.redhat.com/errata/RHSA-2015-0087.html	vendor-advisoryx_refsource_REDHAT
http://www.ubuntu.com/usn/USN-2334-1	vendor-advisoryx_refsource_UBUNTU
http://secunia.com/advisories/60564	third-party-advisoryx_refsource_SECUNIA
http://rhn.redhat.com/errata/RHSA-2014-1083.html	vendor-advisoryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=1113470	x_refsource_CONFIRM
http://secunia.com/advisories/59777	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/59434	third-party-advisoryx_refsource_SECUNIA
https://github.com/torvalds/linux/commit/883a1d49…	x_refsource_CONFIRM
http://git.kernel.org/?p=linux/kernel/git/torvald…	x_refsource_CONFIRM
http://www.kernel.org/pub/linux/kernel/v3.x/Chang…	x_refsource_CONFIRM
http://git.kernel.org/?p=linux/kernel/git/torvald…	x_refsource_CONFIRM
http://www.openwall.com/lists/oss-security/2014/06/26/6	mailing-listx_refsource_MLIST
http://www.securitytracker.com/id/1038201	vdb-entryx_refsource_SECTRACK
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE

Date Public

2014-06-26 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T11:20:26.974Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "60545",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/60545"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://source.android.com/security/bulletin/2017-04-01"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/ac902c112d90a89e59916f751c2745f4dbdbb4bd"
          },
          {
            "name": "USN-2335-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2335-1"
          },
          {
            "name": "RHSA-2015:0087",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0087.html"
          },
          {
            "name": "USN-2334-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2334-1"
          },
          {
            "name": "60564",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/60564"
          },
          {
            "name": "RHSA-2014:1083",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1083.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1113470"
          },
          {
            "name": "59777",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59777"
          },
          {
            "name": "59434",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59434"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/883a1d49f0d77d30012f114b2e19fc141beb3e8e"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ac902c112d90a89e59916f751c2745f4dbdbb4bd"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.15.2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=883a1d49f0d77d30012f114b2e19fc141beb3e8e"
          },
          {
            "name": "[oss-security] 20140626 Re: CVE Request: Linux kernel ALSA core control API vulnerabilities",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2014/06/26/6"
          },
          {
            "name": "1038201",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038201"
          },
          {
            "name": "SUSE-SU-2015:0812",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-06-26T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple integer overflows in sound/core/control.c in the ALSA control implementation in the Linux kernel before 3.15.2 allow local users to cause a denial of service by leveraging /dev/snd/controlCX access, related to (1) index values in the snd_ctl_add function and (2) numid values in the snd_ctl_remove_numid_conflict function."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-07-10T09:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "60545",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/60545"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://source.android.com/security/bulletin/2017-04-01"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/torvalds/linux/commit/ac902c112d90a89e59916f751c2745f4dbdbb4bd"
        },
        {
          "name": "USN-2335-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2335-1"
        },
        {
          "name": "RHSA-2015:0087",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0087.html"
        },
        {
          "name": "USN-2334-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2334-1"
        },
        {
          "name": "60564",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/60564"
        },
        {
          "name": "RHSA-2014:1083",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-1083.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1113470"
        },
        {
          "name": "59777",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59777"
        },
        {
          "name": "59434",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59434"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/torvalds/linux/commit/883a1d49f0d77d30012f114b2e19fc141beb3e8e"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ac902c112d90a89e59916f751c2745f4dbdbb4bd"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.15.2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=883a1d49f0d77d30012f114b2e19fc141beb3e8e"
        },
        {
          "name": "[oss-security] 20140626 Re: CVE Request: Linux kernel ALSA core control API vulnerabilities",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2014/06/26/6"
        },
        {
          "name": "1038201",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038201"
        },
        {
          "name": "SUSE-SU-2015:0812",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2014-4656",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple integer overflows in sound/core/control.c in the ALSA control implementation in the Linux kernel before 3.15.2 allow local users to cause a denial of service by leveraging /dev/snd/controlCX access, related to (1) index values in the snd_ctl_add function and (2) numid values in the snd_ctl_remove_numid_conflict function."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "60545",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/60545"
            },
            {
              "name": "https://source.android.com/security/bulletin/2017-04-01",
              "refsource": "CONFIRM",
              "url": "https://source.android.com/security/bulletin/2017-04-01"
            },
            {
              "name": "https://github.com/torvalds/linux/commit/ac902c112d90a89e59916f751c2745f4dbdbb4bd",
              "refsource": "CONFIRM",
              "url": "https://github.com/torvalds/linux/commit/ac902c112d90a89e59916f751c2745f4dbdbb4bd"
            },
            {
              "name": "USN-2335-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2335-1"
            },
            {
              "name": "RHSA-2015:0087",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0087.html"
            },
            {
              "name": "USN-2334-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2334-1"
            },
            {
              "name": "60564",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/60564"
            },
            {
              "name": "RHSA-2014:1083",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-1083.html"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1113470",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1113470"
            },
            {
              "name": "59777",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59777"
            },
            {
              "name": "59434",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59434"
            },
            {
              "name": "https://github.com/torvalds/linux/commit/883a1d49f0d77d30012f114b2e19fc141beb3e8e",
              "refsource": "CONFIRM",
              "url": "https://github.com/torvalds/linux/commit/883a1d49f0d77d30012f114b2e19fc141beb3e8e"
            },
            {
              "name": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=ac902c112d90a89e59916f751c2745f4dbdbb4bd",
              "refsource": "CONFIRM",
              "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=ac902c112d90a89e59916f751c2745f4dbdbb4bd"
            },
            {
              "name": "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.15.2",
              "refsource": "CONFIRM",
              "url": "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.15.2"
            },
            {
              "name": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=883a1d49f0d77d30012f114b2e19fc141beb3e8e",
              "refsource": "CONFIRM",
              "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=883a1d49f0d77d30012f114b2e19fc141beb3e8e"
            },
            {
              "name": "[oss-security] 20140626 Re: CVE Request: Linux kernel ALSA core control API vulnerabilities",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2014/06/26/6"
            },
            {
              "name": "1038201",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038201"
            },
            {
              "name": "SUSE-SU-2015:0812",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2014-4656",
    "datePublished": "2014-07-03T01:00:00.000Z",
    "dateReserved": "2014-06-25T00:00:00.000Z",
    "dateUpdated": "2024-08-06T11:20:26.974Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2014-5045 (GCVE-0-2014-5045)

Vulnerability from cvelistv5 – Published: 2014-08-01 10:00 – Updated: 2024-08-06 11:34

Summary

The mountpoint_last function in fs/namei.c in the Linux kernel before 3.15.8 does not properly maintain a certain reference count during attempts to use the umount system call in conjunction with a symlink, which allows local users to cause a denial of service (memory consumption or use-after-free) or possibly have unspecified other impact via the umount program.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

8 references

URL	Tags
http://www.openwall.com/lists/oss-security/2014/07/24/2	mailing-listx_refsource_MLIST
https://github.com/torvalds/linux/commit/295dc39d…	x_refsource_CONFIRM
http://www.securityfocus.com/bid/68862	vdb-entryx_refsource_BID
http://rhn.redhat.com/errata/RHSA-2015-0062.html	vendor-advisoryx_refsource_REDHAT
http://www.kernel.org/pub/linux/kernel/v3.x/Chang…	x_refsource_CONFIRM
http://git.kernel.org/?p=linux/kernel/git/torvald…	x_refsource_CONFIRM
http://secunia.com/advisories/60353	third-party-advisoryx_refsource_SECUNIA
https://bugzilla.redhat.com/show_bug.cgi?id=1122472	x_refsource_CONFIRM

Date Public

2014-07-23 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T11:34:37.379Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[oss-security] 20140723 Re: CVE request: kernel: vfs: refcount issues during unmount on symlink",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2014/07/24/2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/295dc39d941dc2ae53d5c170365af4c9d5c16212"
          },
          {
            "name": "68862",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/68862"
          },
          {
            "name": "RHSA-2015:0062",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0062.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.15.8"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=295dc39d941dc2ae53d5c170365af4c9d5c16212"
          },
          {
            "name": "60353",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/60353"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1122472"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-07-23T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The mountpoint_last function in fs/namei.c in the Linux kernel before 3.15.8 does not properly maintain a certain reference count during attempts to use the umount system call in conjunction with a symlink, which allows local users to cause a denial of service (memory consumption or use-after-free) or possibly have unspecified other impact via the umount program."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-01-04T20:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "[oss-security] 20140723 Re: CVE request: kernel: vfs: refcount issues during unmount on symlink",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2014/07/24/2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/torvalds/linux/commit/295dc39d941dc2ae53d5c170365af4c9d5c16212"
        },
        {
          "name": "68862",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/68862"
        },
        {
          "name": "RHSA-2015:0062",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0062.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.15.8"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=295dc39d941dc2ae53d5c170365af4c9d5c16212"
        },
        {
          "name": "60353",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/60353"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1122472"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2014-5045",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The mountpoint_last function in fs/namei.c in the Linux kernel before 3.15.8 does not properly maintain a certain reference count during attempts to use the umount system call in conjunction with a symlink, which allows local users to cause a denial of service (memory consumption or use-after-free) or possibly have unspecified other impact via the umount program."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "[oss-security] 20140723 Re: CVE request: kernel: vfs: refcount issues during unmount on symlink",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2014/07/24/2"
            },
            {
              "name": "https://github.com/torvalds/linux/commit/295dc39d941dc2ae53d5c170365af4c9d5c16212",
              "refsource": "CONFIRM",
              "url": "https://github.com/torvalds/linux/commit/295dc39d941dc2ae53d5c170365af4c9d5c16212"
            },
            {
              "name": "68862",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/68862"
            },
            {
              "name": "RHSA-2015:0062",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0062.html"
            },
            {
              "name": "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.15.8",
              "refsource": "CONFIRM",
              "url": "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.15.8"
            },
            {
              "name": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=295dc39d941dc2ae53d5c170365af4c9d5c16212",
              "refsource": "CONFIRM",
              "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=295dc39d941dc2ae53d5c170365af4c9d5c16212"
            },
            {
              "name": "60353",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/60353"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1122472",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1122472"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2014-5045",
    "datePublished": "2014-08-01T10:00:00.000Z",
    "dateReserved": "2014-07-23T00:00:00.000Z",
    "dateUpdated": "2024-08-06T11:34:37.379Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2014-6410 (GCVE-0-2014-6410)

Vulnerability from cvelistv5 – Published: 2014-09-28 10:00 – Updated: 2024-08-06 12:17

Summary

The __udf_read_inode function in fs/udf/inode.c in the Linux kernel through 3.16.3 does not restrict the amount of ICB indirection, which allows physically proximate attackers to cause a denial of service (infinite loop or stack consumption) via a UDF filesystem with a crafted inode.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

16 references

URL	Tags
http://www.ubuntu.com/usn/USN-2377-1	vendor-advisoryx_refsource_UBUNTU
http://rhn.redhat.com/errata/RHSA-2014-1318.html	vendor-advisoryx_refsource_REDHAT
http://marc.info/?l=bugtraq&m=142722450701342&w=2	vendor-advisoryx_refsource_HP
http://www.ubuntu.com/usn/USN-2375-1	vendor-advisoryx_refsource_UBUNTU
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.openwall.com/lists/oss-security/2014/09/15/9	mailing-listx_refsource_MLIST
http://marc.info/?l=bugtraq&m=142722544401658&w=2	vendor-advisoryx_refsource_HP
http://www.securityfocus.com/bid/69799	vdb-entryx_refsource_BID
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.ubuntu.com/usn/USN-2378-1	vendor-advisoryx_refsource_UBUNTU
http://git.kernel.org/?p=linux/kernel/git/torvald…	x_refsource_CONFIRM
http://www.ubuntu.com/usn/USN-2374-1	vendor-advisoryx_refsource_UBUNTU
https://bugzilla.redhat.com/show_bug.cgi?id=1141809	x_refsource_CONFIRM
https://github.com/torvalds/linux/commit/c03aa9f6…	x_refsource_CONFIRM
http://www.ubuntu.com/usn/USN-2379-1	vendor-advisoryx_refsource_UBUNTU
http://www.ubuntu.com/usn/USN-2376-1	vendor-advisoryx_refsource_UBUNTU

Date Public

2014-09-15 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T12:17:23.711Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "USN-2377-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2377-1"
          },
          {
            "name": "RHSA-2014:1318",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1318.html"
          },
          {
            "name": "HPSBGN03285",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142722450701342\u0026w=2"
          },
          {
            "name": "USN-2375-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2375-1"
          },
          {
            "name": "SUSE-SU-2014:1316",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00006.html"
          },
          {
            "name": "[oss-security] 20140915 Re: CVE request for Linux kernel: udf: Avoid infinite loop when processing indirect ICBs",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2014/09/15/9"
          },
          {
            "name": "HPSBGN03282",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142722544401658\u0026w=2"
          },
          {
            "name": "69799",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/69799"
          },
          {
            "name": "SUSE-SU-2014:1319",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00007.html"
          },
          {
            "name": "USN-2378-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2378-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=c03aa9f6e1f938618e6db2e23afef0574efeeb65"
          },
          {
            "name": "USN-2374-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2374-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1141809"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/c03aa9f6e1f938618e6db2e23afef0574efeeb65"
          },
          {
            "name": "USN-2379-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2379-1"
          },
          {
            "name": "USN-2376-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2376-1"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-09-15T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The __udf_read_inode function in fs/udf/inode.c in the Linux kernel through 3.16.3 does not restrict the amount of ICB indirection, which allows physically proximate attackers to cause a denial of service (infinite loop or stack consumption) via a UDF filesystem with a crafted inode."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-08-19T15:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "USN-2377-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2377-1"
        },
        {
          "name": "RHSA-2014:1318",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-1318.html"
        },
        {
          "name": "HPSBGN03285",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142722450701342\u0026w=2"
        },
        {
          "name": "USN-2375-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2375-1"
        },
        {
          "name": "SUSE-SU-2014:1316",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00006.html"
        },
        {
          "name": "[oss-security] 20140915 Re: CVE request for Linux kernel: udf: Avoid infinite loop when processing indirect ICBs",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2014/09/15/9"
        },
        {
          "name": "HPSBGN03282",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142722544401658\u0026w=2"
        },
        {
          "name": "69799",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/69799"
        },
        {
          "name": "SUSE-SU-2014:1319",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00007.html"
        },
        {
          "name": "USN-2378-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2378-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=c03aa9f6e1f938618e6db2e23afef0574efeeb65"
        },
        {
          "name": "USN-2374-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2374-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1141809"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/torvalds/linux/commit/c03aa9f6e1f938618e6db2e23afef0574efeeb65"
        },
        {
          "name": "USN-2379-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2379-1"
        },
        {
          "name": "USN-2376-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2376-1"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2014-6410",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The __udf_read_inode function in fs/udf/inode.c in the Linux kernel through 3.16.3 does not restrict the amount of ICB indirection, which allows physically proximate attackers to cause a denial of service (infinite loop or stack consumption) via a UDF filesystem with a crafted inode."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "USN-2377-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2377-1"
            },
            {
              "name": "RHSA-2014:1318",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-1318.html"
            },
            {
              "name": "HPSBGN03285",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=142722450701342\u0026w=2"
            },
            {
              "name": "USN-2375-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2375-1"
            },
            {
              "name": "SUSE-SU-2014:1316",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00006.html"
            },
            {
              "name": "[oss-security] 20140915 Re: CVE request for Linux kernel: udf: Avoid infinite loop when processing indirect ICBs",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2014/09/15/9"
            },
            {
              "name": "HPSBGN03282",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=142722544401658\u0026w=2"
            },
            {
              "name": "69799",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/69799"
            },
            {
              "name": "SUSE-SU-2014:1319",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00007.html"
            },
            {
              "name": "USN-2378-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2378-1"
            },
            {
              "name": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=c03aa9f6e1f938618e6db2e23afef0574efeeb65",
              "refsource": "CONFIRM",
              "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=c03aa9f6e1f938618e6db2e23afef0574efeeb65"
            },
            {
              "name": "USN-2374-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2374-1"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1141809",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1141809"
            },
            {
              "name": "https://github.com/torvalds/linux/commit/c03aa9f6e1f938618e6db2e23afef0574efeeb65",
              "refsource": "CONFIRM",
              "url": "https://github.com/torvalds/linux/commit/c03aa9f6e1f938618e6db2e23afef0574efeeb65"
            },
            {
              "name": "USN-2379-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2379-1"
            },
            {
              "name": "USN-2376-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2376-1"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2014-6410",
    "datePublished": "2014-09-28T10:00:00.000Z",
    "dateReserved": "2014-09-15T00:00:00.000Z",
    "dateUpdated": "2024-08-06T12:17:23.711Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

RHSA-2014_1971

CVE-2014-3688 (GCVE-0-2014-3688)

CVE-2014-4027 (GCVE-0-2014-4027)

CVE-2014-4652 (GCVE-0-2014-4652)

CVE-2014-4654 (GCVE-0-2014-4654)

CVE-2014-4655 (GCVE-0-2014-4655)

CVE-2014-4656 (GCVE-0-2014-4656)

CVE-2014-5045 (GCVE-0-2014-5045)

CVE-2014-6410 (GCVE-0-2014-6410)

Tags

Sightings

Nomenclature

Related by attack behaviour