Vulnerability-Lookup

RHSA-2015:0290

Vulnerability from csaf_opensuse - Published: 2015-03-05 00:00 - Updated: 2026-09-20 10:53

Summary

security update for kernel

Severity

Important

Notes

Title of the patch: security update for kernel

Description of the patch: This security update provides a functional equivalent of RHSA-2015:0290. The original Red Hat(R) advisory is available from the Red Hat web site at https://access.redhat.com/errata/RHSA-2015:0290.

Patchnames: RHSA-2015:0290

CVE-2014-3690

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 12 products

Product	Version	Remediation
Unresolved product id: SUSE Liberty Linux 7:kernel-0:3.10.0-229.el7.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-229.el7.noarch	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:kernel-debug-0:3.10.0-229.el7.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-229.el7.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:kernel-devel-0:3.10.0-229.el7.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:kernel-doc-0:3.10.0-229.el7.noarch	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:kernel-headers-0:3.10.0-229.el7.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:kernel-tools-0:3.10.0-229.el7.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-229.el7.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-229.el7.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:perf-0:3.10.0-229.el7.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:python-perf-0:3.10.0-229.el7.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2014-3940

Affected products

Recommended 12 products, the same list as for CVE-2014-3690

Threats

Impact low

CVE-2014-7825

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 12 products, the same list as for CVE-2014-3690

Threats

Impact important

CVE-2014-7826

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 12 products, the same list as for CVE-2014-3690

Threats

Impact Important

CVE-2014-8086

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 12 products, the same list as for CVE-2014-3690

Threats

Impact moderate

CVE-2014-8160

8.7 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N

Affected products

Recommended 12 products, the same list as for CVE-2014-3690

Threats

Impact important

CVE-2014-8172

Affected products

Recommended 12 products, the same list as for CVE-2014-3690

Threats

Impact moderate

CVE-2014-8173

Affected products

Recommended 12 products, the same list as for CVE-2014-3690

Threats

Impact moderate

CVE-2014-8709

Affected products

Recommended 12 products, the same list as for CVE-2014-3690

Threats

Impact important

CVE-2014-8884

Affected products

Recommended 12 products, the same list as for CVE-2014-3690

Threats

Impact moderate

CVE-2015-0274

Affected products

Recommended 12 products, the same list as for CVE-2014-3690

Threats

Impact moderate

References

43 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/r…	self
https://www.suse.com/security/cve/CVE-2014-3690/	self
https://www.suse.com/security/cve/CVE-2014-3940/	self
https://www.suse.com/security/cve/CVE-2014-7825/	self
https://www.suse.com/security/cve/CVE-2014-7826/	self
https://www.suse.com/security/cve/CVE-2014-8086/	self
https://www.suse.com/security/cve/CVE-2014-8160/	self
https://www.suse.com/security/cve/CVE-2014-8172/	self
https://www.suse.com/security/cve/CVE-2014-8173/	self
https://www.suse.com/security/cve/CVE-2014-8709/	self
https://www.suse.com/security/cve/CVE-2014-8884/	self
https://www.suse.com/security/cve/CVE-2015-0274/	self
https://www.suse.com/security/cve/CVE-2014-3690	external
https://bugzilla.suse.com/902232	external
https://www.suse.com/security/cve/CVE-2014-3940	external
https://bugzilla.suse.com/881101	external
https://www.suse.com/security/cve/CVE-2014-7825	external
https://bugzilla.suse.com/904012	external
https://bugzilla.suse.com/904013	external
https://www.suse.com/security/cve/CVE-2014-7826	external
https://bugzilla.suse.com/904012	external
https://bugzilla.suse.com/904013	external
https://www.suse.com/security/cve/CVE-2014-8086	external
https://bugzilla.suse.com/900881	external
https://www.suse.com/security/cve/CVE-2014-8160	external
https://bugzilla.suse.com/857643	external
https://bugzilla.suse.com/913059	external
https://www.suse.com/security/cve/CVE-2014-8172	external
https://bugzilla.suse.com/920632	external
https://www.suse.com/security/cve/CVE-2014-8173	external
https://bugzilla.suse.com/920583	external
https://www.suse.com/security/cve/CVE-2014-8709	external
https://bugzilla.suse.com/904700	external
https://www.suse.com/security/cve/CVE-2014-8884	external
https://bugzilla.suse.com/904876	external
https://bugzilla.suse.com/905522	external
https://bugzilla.suse.com/905739	external
https://bugzilla.suse.com/905744	external
https://bugzilla.suse.com/905748	external
https://bugzilla.suse.com/905764	external
https://www.suse.com/security/cve/CVE-2015-0274	external
https://bugzilla.suse.com/919655	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "security update for kernel",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This security update provides a functional equivalent of RHSA-2015:0290.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2015:0290.\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "RHSA-2015:0290",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2015_0290.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2014-3690 page",
        "url": "https://www.suse.com/security/cve/CVE-2014-3690/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2014-3940 page",
        "url": "https://www.suse.com/security/cve/CVE-2014-3940/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2014-7825 page",
        "url": "https://www.suse.com/security/cve/CVE-2014-7825/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2014-7826 page",
        "url": "https://www.suse.com/security/cve/CVE-2014-7826/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2014-8086 page",
        "url": "https://www.suse.com/security/cve/CVE-2014-8086/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2014-8160 page",
        "url": "https://www.suse.com/security/cve/CVE-2014-8160/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2014-8172 page",
        "url": "https://www.suse.com/security/cve/CVE-2014-8172/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2014-8173 page",
        "url": "https://www.suse.com/security/cve/CVE-2014-8173/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2014-8709 page",
        "url": "https://www.suse.com/security/cve/CVE-2014-8709/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2014-8884 page",
        "url": "https://www.suse.com/security/cve/CVE-2014-8884/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-0274 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-0274/"
      }
    ],
    "title": "security update for kernel",
    "tracking": {
      "current_release_date": "2026-09-20T10:53:53Z",
      "generator": {
        "date": "2015-03-05T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "RHSA-2015:0290",
      "initial_release_date": "2015-03-05T00:00:00Z",
      "revision_history": [
        {
          "date": "2015-03-05T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-09-20T10:53:53Z",
          "number": "2",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-abi-whitelists-0:3.10.0-229.el7.noarch",
                "product": {
                  "name": "kernel-abi-whitelists-0:3.10.0-229.el7.noarch",
                  "product_id": "kernel-abi-whitelists-0:3.10.0-229.el7.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-abi-whitelists@3.10.0-229.el7?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-doc-0:3.10.0-229.el7.noarch",
                "product": {
                  "name": "kernel-doc-0:3.10.0-229.el7.noarch",
                  "product_id": "kernel-doc-0:3.10.0-229.el7.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-doc@3.10.0-229.el7?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-0:3.10.0-229.el7.x86_64",
                "product": {
                  "name": "kernel-0:3.10.0-229.el7.x86_64",
                  "product_id": "kernel-0:3.10.0-229.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel@3.10.0-229.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-debug-0:3.10.0-229.el7.x86_64",
                "product": {
                  "name": "kernel-debug-0:3.10.0-229.el7.x86_64",
                  "product_id": "kernel-debug-0:3.10.0-229.el7.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:linux:linux_kernel:3.10.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-debug@3.10.0-229.el7?arch=x86_64\u0026upstream=kernel-debug-0:3.10.0-229.el7.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-debug-devel-0:3.10.0-229.el7.x86_64",
                "product": {
                  "name": "kernel-debug-devel-0:3.10.0-229.el7.x86_64",
                  "product_id": "kernel-debug-devel-0:3.10.0-229.el7.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:linux:linux_kernel:3.10.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-debug-devel@3.10.0-229.el7?arch=x86_64\u0026upstream=kernel-debug-0:3.10.0-229.el7.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-devel-0:3.10.0-229.el7.x86_64",
                "product": {
                  "name": "kernel-devel-0:3.10.0-229.el7.x86_64",
                  "product_id": "kernel-devel-0:3.10.0-229.el7.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:3.10.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-devel@3.10.0-229.el7?arch=x86_64\u0026upstream=kernel-source-0:3.10.0-229.el7.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-headers-0:3.10.0-229.el7.x86_64",
                "product": {
                  "name": "kernel-headers-0:3.10.0-229.el7.x86_64",
                  "product_id": "kernel-headers-0:3.10.0-229.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-headers@3.10.0-229.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-tools-0:3.10.0-229.el7.x86_64",
                "product": {
                  "name": "kernel-tools-0:3.10.0-229.el7.x86_64",
                  "product_id": "kernel-tools-0:3.10.0-229.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-tools@3.10.0-229.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-tools-libs-0:3.10.0-229.el7.x86_64",
                "product": {
                  "name": "kernel-tools-libs-0:3.10.0-229.el7.x86_64",
                  "product_id": "kernel-tools-libs-0:3.10.0-229.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-tools-libs@3.10.0-229.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-tools-libs-devel-0:3.10.0-229.el7.x86_64",
                "product": {
                  "name": "kernel-tools-libs-devel-0:3.10.0-229.el7.x86_64",
                  "product_id": "kernel-tools-libs-devel-0:3.10.0-229.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-tools-libs-devel@3.10.0-229.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "perf-0:3.10.0-229.el7.x86_64",
                "product": {
                  "name": "perf-0:3.10.0-229.el7.x86_64",
                  "product_id": "perf-0:3.10.0-229.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/perf@3.10.0-229.el7?arch=x86_64\u0026upstream=perf-0:3.10.0-229.el7.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python-perf-0:3.10.0-229.el7.x86_64",
                "product": {
                  "name": "python-perf-0:3.10.0-229.el7.x86_64",
                  "product_id": "python-perf-0:3.10.0-229.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/python-perf@3.10.0-229.el7?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Liberty Linux 7",
                "product": {
                  "name": "SUSE Liberty Linux 7",
                  "product_id": "SUSE Liberty Linux 7",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sll:7"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-0:3.10.0-229.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:kernel-0:3.10.0-229.el7.x86_64"
        },
        "product_reference": "kernel-0:3.10.0-229.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-abi-whitelists-0:3.10.0-229.el7.noarch as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-229.el7.noarch"
        },
        "product_reference": "kernel-abi-whitelists-0:3.10.0-229.el7.noarch",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-0:3.10.0-229.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-229.el7.x86_64"
        },
        "product_reference": "kernel-debug-0:3.10.0-229.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-devel-0:3.10.0-229.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-229.el7.x86_64"
        },
        "product_reference": "kernel-debug-devel-0:3.10.0-229.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-devel-0:3.10.0-229.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-229.el7.x86_64"
        },
        "product_reference": "kernel-devel-0:3.10.0-229.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-doc-0:3.10.0-229.el7.noarch as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-229.el7.noarch"
        },
        "product_reference": "kernel-doc-0:3.10.0-229.el7.noarch",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-headers-0:3.10.0-229.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-229.el7.x86_64"
        },
        "product_reference": "kernel-headers-0:3.10.0-229.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-tools-0:3.10.0-229.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-229.el7.x86_64"
        },
        "product_reference": "kernel-tools-0:3.10.0-229.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-tools-libs-0:3.10.0-229.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-229.el7.x86_64"
        },
        "product_reference": "kernel-tools-libs-0:3.10.0-229.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-tools-libs-devel-0:3.10.0-229.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-229.el7.x86_64"
        },
        "product_reference": "kernel-tools-libs-devel-0:3.10.0-229.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perf-0:3.10.0-229.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:perf-0:3.10.0-229.el7.x86_64"
        },
        "product_reference": "perf-0:3.10.0-229.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-perf-0:3.10.0-229.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:python-perf-0:3.10.0-229.el7.x86_64"
        },
        "product_reference": "python-perf-0:3.10.0-229.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2014-3690",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2014-3690"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel before 3.17.2 on Intel processors does not ensure that the value in the CR4 control register remains the same after a VM entry, which allows host OS users to kill arbitrary processes or cause a denial of service (system disruption) by leveraging /dev/kvm access, as demonstrated by PR_SET_TSC prctl calls within a modified copy of QEMU.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:kernel-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-229.el7.noarch",
          "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-229.el7.noarch",
          "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:perf-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:python-perf-0:3.10.0-229.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2014-3690",
          "url": "https://www.suse.com/security/cve/CVE-2014-3690"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 902232 for CVE-2014-3690",
          "url": "https://bugzilla.suse.com/902232"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:kernel-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-229.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-229.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-229.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 7:kernel-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-229.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-229.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-229.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-03-05T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2014-3690"
    },
    {
      "cve": "CVE-2014-3940",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2014-3940"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The Linux kernel through 3.14.5 does not properly consider the presence of hugetlb entries, which allows local users to cause a denial of service (memory corruption or system crash) by accessing certain memory locations, as demonstrated by triggering a race condition via numa_maps read operations during hugepage migration, related to fs/proc/task_mmu.c and mm/mempolicy.c.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:kernel-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-229.el7.noarch",
          "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-229.el7.noarch",
          "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:perf-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:python-perf-0:3.10.0-229.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2014-3940",
          "url": "https://www.suse.com/security/cve/CVE-2014-3940"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 881101 for CVE-2014-3940",
          "url": "https://bugzilla.suse.com/881101"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:kernel-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-229.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-229.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-229.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-03-05T00:00:00Z",
          "details": "low"
        }
      ],
      "title": "CVE-2014-3940"
    },
    {
      "cve": "CVE-2014-7825",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2014-7825"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "kernel/trace/trace_syscalls.c in the Linux kernel through 3.17.2 does not properly handle private syscall numbers during use of the perf subsystem, which allows local users to cause a denial of service (out-of-bounds read and OOPS) or bypass the ASLR protection mechanism via a crafted application.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:kernel-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-229.el7.noarch",
          "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-229.el7.noarch",
          "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:perf-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:python-perf-0:3.10.0-229.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2014-7825",
          "url": "https://www.suse.com/security/cve/CVE-2014-7825"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 904012 for CVE-2014-7825",
          "url": "https://bugzilla.suse.com/904012"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 904013 for CVE-2014-7825",
          "url": "https://bugzilla.suse.com/904013"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:kernel-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-229.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-229.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-229.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 7:kernel-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-229.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-229.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-229.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-03-05T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2014-7825"
    },
    {
      "cve": "CVE-2014-7826",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2014-7826"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "kernel/trace/trace_syscalls.c in the Linux kernel through 3.17.2 does not properly handle private syscall numbers during use of the ftrace subsystem, which allows local users to gain privileges or cause a denial of service (invalid pointer dereference) via a crafted application.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:kernel-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-229.el7.noarch",
          "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-229.el7.noarch",
          "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:perf-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:python-perf-0:3.10.0-229.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2014-7826",
          "url": "https://www.suse.com/security/cve/CVE-2014-7826"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 904012 for CVE-2014-7826",
          "url": "https://bugzilla.suse.com/904012"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 904013 for CVE-2014-7826",
          "url": "https://bugzilla.suse.com/904013"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:kernel-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-229.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-229.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-229.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 7:kernel-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-229.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-229.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-229.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-03-05T00:00:00Z",
          "details": "Important"
        }
      ],
      "title": "CVE-2014-7826"
    },
    {
      "cve": "CVE-2014-8086",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2014-8086"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Race condition in the ext4_file_write_iter function in fs/ext4/file.c in the Linux kernel through 3.17 allows local users to cause a denial of service (file unavailability) via a combination of a write action and an F_SETFL fcntl operation for the O_DIRECT flag.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:kernel-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-229.el7.noarch",
          "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-229.el7.noarch",
          "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:perf-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:python-perf-0:3.10.0-229.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2014-8086",
          "url": "https://www.suse.com/security/cve/CVE-2014-8086"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 900881 for CVE-2014-8086",
          "url": "https://bugzilla.suse.com/900881"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:kernel-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-229.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-229.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-229.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 7:kernel-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-229.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-229.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-229.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-03-05T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2014-8086"
    },
    {
      "cve": "CVE-2014-8160",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2014-8160"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "net/netfilter/nf_conntrack_proto_generic.c in the Linux kernel before 3.18 generates incorrect conntrack entries during handling of certain iptables rule sets for the SCTP, DCCP, GRE, and UDP-Lite protocols, which allows remote attackers to bypass intended access restrictions via packets with disallowed port numbers.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:kernel-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-229.el7.noarch",
          "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-229.el7.noarch",
          "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:perf-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:python-perf-0:3.10.0-229.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2014-8160",
          "url": "https://www.suse.com/security/cve/CVE-2014-8160"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 857643 for CVE-2014-8160",
          "url": "https://bugzilla.suse.com/857643"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 913059 for CVE-2014-8160",
          "url": "https://bugzilla.suse.com/913059"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:kernel-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-229.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-229.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-229.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 7:kernel-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-229.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-229.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-229.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-03-05T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2014-8160"
    },
    {
      "cve": "CVE-2014-8172",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2014-8172"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The filesystem implementation in the Linux kernel before 3.13 performs certain operations on lists of files with an inappropriate locking approach, which allows local users to cause a denial of service (soft lockup or system crash) via unspecified use of Asynchronous I/O (AIO) operations.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:kernel-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-229.el7.noarch",
          "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-229.el7.noarch",
          "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:perf-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:python-perf-0:3.10.0-229.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2014-8172",
          "url": "https://www.suse.com/security/cve/CVE-2014-8172"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 920632 for CVE-2014-8172",
          "url": "https://bugzilla.suse.com/920632"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:kernel-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-229.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-229.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-229.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-03-05T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2014-8172"
    },
    {
      "cve": "CVE-2014-8173",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2014-8173"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The pmd_none_or_trans_huge_or_clear_bad function in include/asm-generic/pgtable.h in the Linux kernel before 3.13 on NUMA systems does not properly determine whether a Page Middle Directory (PMD) entry is a transparent huge-table entry, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a crafted MADV_WILLNEED madvise system call that leverages the absence of a page-table lock.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:kernel-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-229.el7.noarch",
          "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-229.el7.noarch",
          "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:perf-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:python-perf-0:3.10.0-229.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2014-8173",
          "url": "https://www.suse.com/security/cve/CVE-2014-8173"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 920583 for CVE-2014-8173",
          "url": "https://bugzilla.suse.com/920583"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:kernel-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-229.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-229.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-229.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-03-05T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2014-8173"
    },
    {
      "cve": "CVE-2014-8709",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2014-8709"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The ieee80211_fragment function in net/mac80211/tx.c in the Linux kernel before 3.13.5 does not properly maintain a certain tail pointer, which allows remote attackers to obtain sensitive cleartext information by reading packets.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:kernel-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-229.el7.noarch",
          "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-229.el7.noarch",
          "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:perf-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:python-perf-0:3.10.0-229.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2014-8709",
          "url": "https://www.suse.com/security/cve/CVE-2014-8709"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 904700 for CVE-2014-8709",
          "url": "https://bugzilla.suse.com/904700"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:kernel-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-229.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-229.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-229.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-03-05T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2014-8709"
    },
    {
      "cve": "CVE-2014-8884",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2014-8884"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Stack-based buffer overflow in the ttusbdecfe_dvbs_diseqc_send_master_cmd function in drivers/media/usb/ttusb-dec/ttusbdecfe.c in the Linux kernel before 3.17.4 allows local users to cause a denial of service (system crash) or possibly gain privileges via a large message length in an ioctl call.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:kernel-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-229.el7.noarch",
          "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-229.el7.noarch",
          "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:perf-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:python-perf-0:3.10.0-229.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2014-8884",
          "url": "https://www.suse.com/security/cve/CVE-2014-8884"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 904876 for CVE-2014-8884",
          "url": "https://bugzilla.suse.com/904876"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 905522 for CVE-2014-8884",
          "url": "https://bugzilla.suse.com/905522"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 905739 for CVE-2014-8884",
          "url": "https://bugzilla.suse.com/905739"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 905744 for CVE-2014-8884",
          "url": "https://bugzilla.suse.com/905744"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 905748 for CVE-2014-8884",
          "url": "https://bugzilla.suse.com/905748"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 905764 for CVE-2014-8884",
          "url": "https://bugzilla.suse.com/905764"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:kernel-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-229.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-229.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-229.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-03-05T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2014-8884"
    },
    {
      "cve": "CVE-2015-0274",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-0274"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The XFS implementation in the Linux kernel before 3.15 improperly uses an old size value during remote attribute replacement, which allows local users to cause a denial of service (transaction overrun and data corruption) or possibly gain privileges by leveraging XFS filesystem access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:kernel-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-229.el7.noarch",
          "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-229.el7.noarch",
          "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:perf-0:3.10.0-229.el7.x86_64",
          "SUSE Liberty Linux 7:python-perf-0:3.10.0-229.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-0274",
          "url": "https://www.suse.com/security/cve/CVE-2015-0274"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 919655 for CVE-2015-0274",
          "url": "https://bugzilla.suse.com/919655"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:kernel-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-229.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-229.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-229.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-229.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-03-05T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-0274"
    }
  ]
}

CVE-2014-3690 (GCVE-0-2014-3690)

Vulnerability from cvelistv5 – Published: 2014-11-10 11:00 – Updated: 2024-08-06 10:50

Summary

arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel before 3.17.2 on Intel processors does not ensure that the value in the CR4 control register remains the same after a VM entry, which allows host OS users to kill arbitrary processes or cause a denial of service (system disruption) by leveraging /dev/kvm access, as demonstrated by PR_SET_TSC prctl calls within a modified copy of QEMU.

Severity

No CVSS data available.

CWE

Assigner

redhat CNA under the redhat root

CNA scorecard B 82/100 over 1039 records in the last 180 days details

References

22 references

URL	Tags
http://www.openwall.com/lists/oss-security/2014/10/29/7	mailing-listx_refsource_MLIST
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.ubuntu.com/usn/USN-2418-1	vendor-advisoryx_refsource_UBUNTU
http://www.kernel.org/pub/linux/kernel/v3.x/Chang…	x_refsource_CONFIRM
http://www.ubuntu.com/usn/USN-2417-1	vendor-advisoryx_refsource_UBUNTU
http://git.kernel.org/?p=linux/kernel/git/torvald…	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.ubuntu.com/usn/USN-2419-1	vendor-advisoryx_refsource_UBUNTU
http://www.debian.org/security/2014/dsa-3060	vendor-advisoryx_refsource_DEBIAN
http://www.securityfocus.com/bid/70691	vdb-entryx_refsource_BID
http://rhn.redhat.com/errata/RHSA-2015-0864.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-0290.html	vendor-advisoryx_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://github.com/torvalds/linux/commit/d974baa3…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2015-0782.html	vendor-advisoryx_refsource_REDHAT
http://secunia.com/advisories/60174	third-party-advisoryx_refsource_SECUNIA
http://www.ubuntu.com/usn/USN-2421-1	vendor-advisoryx_refsource_UBUNTU
http://www.ubuntu.com/usn/USN-2420-1	vendor-advisoryx_refsource_UBUNTU
https://bugzilla.redhat.com/show_bug.cgi?id=1153322	x_refsource_CONFIRM
http://www.openwall.com/lists/oss-security/2014/10/21/4	mailing-listx_refsource_MLIST

Date Public

2014-10-21 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T10:50:18.307Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[oss-security] 20141029 Re: CVE-2014-3690: KVM DoS triggerable by malicious host userspace",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2014/10/29/7"
          },
          {
            "name": "SUSE-SU-2015:0736",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html"
          },
          {
            "name": "USN-2418-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2418-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.17.2"
          },
          {
            "name": "USN-2417-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2417-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d974baa398f34393db76be45f7d4d04fbdbb4a0a"
          },
          {
            "name": "SUSE-SU-2015:0178",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00035.html"
          },
          {
            "name": "USN-2419-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2419-1"
          },
          {
            "name": "DSA-3060",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-3060"
          },
          {
            "name": "70691",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/70691"
          },
          {
            "name": "RHSA-2015:0864",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0864.html"
          },
          {
            "name": "RHSA-2015:0290",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0290.html"
          },
          {
            "name": "SUSE-SU-2015:0481",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html"
          },
          {
            "name": "MDVSA-2015:058",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:058"
          },
          {
            "name": "openSUSE-SU-2015:0566",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/d974baa398f34393db76be45f7d4d04fbdbb4a0a"
          },
          {
            "name": "RHSA-2015:0782",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0782.html"
          },
          {
            "name": "60174",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/60174"
          },
          {
            "name": "USN-2421-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2421-1"
          },
          {
            "name": "USN-2420-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2420-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1153322"
          },
          {
            "name": "[oss-security] 20141021 CVE-2014-3690: KVM DoS triggerable by malicious host userspace",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2014/10/21/4"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-10-21T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel before 3.17.2 on Intel processors does not ensure that the value in the CR4 control register remains the same after a VM entry, which allows host OS users to kill arbitrary processes or cause a denial of service (system disruption) by leveraging /dev/kvm access, as demonstrated by PR_SET_TSC prctl calls within a modified copy of QEMU."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "[oss-security] 20141029 Re: CVE-2014-3690: KVM DoS triggerable by malicious host userspace",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2014/10/29/7"
        },
        {
          "name": "SUSE-SU-2015:0736",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html"
        },
        {
          "name": "USN-2418-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2418-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.17.2"
        },
        {
          "name": "USN-2417-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2417-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d974baa398f34393db76be45f7d4d04fbdbb4a0a"
        },
        {
          "name": "SUSE-SU-2015:0178",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00035.html"
        },
        {
          "name": "USN-2419-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2419-1"
        },
        {
          "name": "DSA-3060",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-3060"
        },
        {
          "name": "70691",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/70691"
        },
        {
          "name": "RHSA-2015:0864",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0864.html"
        },
        {
          "name": "RHSA-2015:0290",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0290.html"
        },
        {
          "name": "SUSE-SU-2015:0481",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html"
        },
        {
          "name": "MDVSA-2015:058",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:058"
        },
        {
          "name": "openSUSE-SU-2015:0566",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/torvalds/linux/commit/d974baa398f34393db76be45f7d4d04fbdbb4a0a"
        },
        {
          "name": "RHSA-2015:0782",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0782.html"
        },
        {
          "name": "60174",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/60174"
        },
        {
          "name": "USN-2421-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2421-1"
        },
        {
          "name": "USN-2420-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2420-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1153322"
        },
        {
          "name": "[oss-security] 20141021 CVE-2014-3690: KVM DoS triggerable by malicious host userspace",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2014/10/21/4"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2014-3690",
    "datePublished": "2014-11-10T11:00:00.000Z",
    "dateReserved": "2014-05-14T00:00:00.000Z",
    "dateUpdated": "2024-08-06T10:50:18.307Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2014-3940 (GCVE-0-2014-3940)

Vulnerability from cvelistv5 – Published: 2014-06-05 17:00 – Updated: 2024-08-06 10:57

Summary

The Linux kernel through 3.14.5 does not properly consider the presence of hugetlb entries, which allows local users to cause a denial of service (memory corruption or system crash) by accessing certain memory locations, as demonstrated by triggering a race condition via numa_maps read operations during hugepage migration, related to fs/proc/task_mmu.c and mm/mempolicy.c.

Severity

No CVSS data available.

CWE

Assigner

mitre CNA under the mitre root

CNA scorecard E 29/100 over 2355 records in the last 180 days details

References

9 references

URL	Tags
https://bugzilla.redhat.com/show_bug.cgi?id=1104097	x_refsource_CONFIRM
http://secunia.com/advisories/59011	third-party-advisoryx_refsource_SECUNIA
https://lkml.org/lkml/2014/3/18/784	mailing-listx_refsource_MLIST
https://support.f5.com/kb/en-us/solutions/public/…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2015-0290.html	vendor-advisoryx_refsource_REDHAT
http://www.openwall.com/lists/oss-security/2014/06/02/5	mailing-listx_refsource_MLIST
http://www.securityfocus.com/bid/67786	vdb-entryx_refsource_BID
http://secunia.com/advisories/61310	third-party-advisoryx_refsource_SECUNIA
http://rhn.redhat.com/errata/RHSA-2015-1272.html	vendor-advisoryx_refsource_REDHAT

Date Public

2014-03-18 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T10:57:18.119Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1104097"
          },
          {
            "name": "59011",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59011"
          },
          {
            "name": "[linux-kernel] 20140318 [PATCH RESEND -mm 1/2] mm: add !pte_present() check on existing hugetlb_entry callbacks",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lkml.org/lkml/2014/3/18/784"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.f5.com/kb/en-us/solutions/public/15000/600/sol15685.html"
          },
          {
            "name": "RHSA-2015:0290",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0290.html"
          },
          {
            "name": "[oss-security] 20140602 CVE-2014-3940 - Linux kernel - missing check during hugepage migration",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2014/06/02/5"
          },
          {
            "name": "67786",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/67786"
          },
          {
            "name": "61310",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/61310"
          },
          {
            "name": "RHSA-2015:1272",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1272.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-03-18T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The Linux kernel through 3.14.5 does not properly consider the presence of hugetlb entries, which allows local users to cause a denial of service (memory corruption or system crash) by accessing certain memory locations, as demonstrated by triggering a race condition via numa_maps read operations during hugepage migration, related to fs/proc/task_mmu.c and mm/mempolicy.c."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-12-22T18:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1104097"
        },
        {
          "name": "59011",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59011"
        },
        {
          "name": "[linux-kernel] 20140318 [PATCH RESEND -mm 1/2] mm: add !pte_present() check on existing hugetlb_entry callbacks",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lkml.org/lkml/2014/3/18/784"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.f5.com/kb/en-us/solutions/public/15000/600/sol15685.html"
        },
        {
          "name": "RHSA-2015:0290",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0290.html"
        },
        {
          "name": "[oss-security] 20140602 CVE-2014-3940 - Linux kernel - missing check during hugepage migration",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2014/06/02/5"
        },
        {
          "name": "67786",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/67786"
        },
        {
          "name": "61310",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/61310"
        },
        {
          "name": "RHSA-2015:1272",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1272.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2014-3940",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The Linux kernel through 3.14.5 does not properly consider the presence of hugetlb entries, which allows local users to cause a denial of service (memory corruption or system crash) by accessing certain memory locations, as demonstrated by triggering a race condition via numa_maps read operations during hugepage migration, related to fs/proc/task_mmu.c and mm/mempolicy.c."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1104097",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1104097"
            },
            {
              "name": "59011",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59011"
            },
            {
              "name": "[linux-kernel] 20140318 [PATCH RESEND -mm 1/2] mm: add !pte_present() check on existing hugetlb_entry callbacks",
              "refsource": "MLIST",
              "url": "https://lkml.org/lkml/2014/3/18/784"
            },
            {
              "name": "https://support.f5.com/kb/en-us/solutions/public/15000/600/sol15685.html",
              "refsource": "CONFIRM",
              "url": "https://support.f5.com/kb/en-us/solutions/public/15000/600/sol15685.html"
            },
            {
              "name": "RHSA-2015:0290",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0290.html"
            },
            {
              "name": "[oss-security] 20140602 CVE-2014-3940 - Linux kernel - missing check during hugepage migration",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2014/06/02/5"
            },
            {
              "name": "67786",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/67786"
            },
            {
              "name": "61310",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/61310"
            },
            {
              "name": "RHSA-2015:1272",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1272.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2014-3940",
    "datePublished": "2014-06-05T17:00:00.000Z",
    "dateReserved": "2014-06-02T00:00:00.000Z",
    "dateUpdated": "2024-08-06T10:57:18.119Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2014-7825 (GCVE-0-2014-7825)

Vulnerability from cvelistv5 – Published: 2014-11-10 11:00 – Updated: 2024-08-06 13:03

Summary

kernel/trace/trace_syscalls.c in the Linux kernel through 3.17.2 does not properly handle private syscall numbers during use of the perf subsystem, which allows local users to cause a denial of service (out-of-bounds read and OOPS) or bypass the ASLR protection mechanism via a crafted application.

Severity

No CVSS data available.

CWE

Assigner

redhat CNA under the redhat root

CNA scorecard B 82/100 over 1039 records in the last 180 days details

References

9 references

URL	Tags
http://www.openwall.com/lists/oss-security/2014/1…	mailing-listx_refsource_MLIST
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
http://rhn.redhat.com/errata/RHSA-2015-0864.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-0290.html	vendor-advisoryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=1161565	x_refsource_CONFIRM
http://git.kernel.org/?p=linux/kernel/git/torvald…	x_refsource_CONFIRM
http://www.securityfocus.com/bid/70972	vdb-entryx_refsource_BID
http://rhn.redhat.com/errata/RHSA-2014-1943.html	vendor-advisoryx_refsource_REDHAT
https://github.com/torvalds/linux/commit/086ba77a…	x_refsource_CONFIRM

Date Public

2014-11-06 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T13:03:27.281Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[oss-security] 20141106 Exploitable issues in Linux perf/ftrace subsystems",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2014/11/06/11"
          },
          {
            "name": "linux-kernel-cve20147825-dos(98557)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/98557"
          },
          {
            "name": "RHSA-2015:0864",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0864.html"
          },
          {
            "name": "RHSA-2015:0290",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0290.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1161565"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=086ba77a6db00ed858ff07451bedee197df868c9"
          },
          {
            "name": "70972",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/70972"
          },
          {
            "name": "RHSA-2014:1943",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1943.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/086ba77a6db00ed858ff07451bedee197df868c9"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-11-06T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "kernel/trace/trace_syscalls.c in the Linux kernel through 3.17.2 does not properly handle private syscall numbers during use of the perf subsystem, which allows local users to cause a denial of service (out-of-bounds read and OOPS) or bypass the ASLR protection mechanism via a crafted application."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "[oss-security] 20141106 Exploitable issues in Linux perf/ftrace subsystems",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2014/11/06/11"
        },
        {
          "name": "linux-kernel-cve20147825-dos(98557)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/98557"
        },
        {
          "name": "RHSA-2015:0864",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0864.html"
        },
        {
          "name": "RHSA-2015:0290",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0290.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1161565"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=086ba77a6db00ed858ff07451bedee197df868c9"
        },
        {
          "name": "70972",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/70972"
        },
        {
          "name": "RHSA-2014:1943",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-1943.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/torvalds/linux/commit/086ba77a6db00ed858ff07451bedee197df868c9"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2014-7825",
    "datePublished": "2014-11-10T11:00:00.000Z",
    "dateReserved": "2014-10-03T00:00:00.000Z",
    "dateUpdated": "2024-08-06T13:03:27.281Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2014-7826 (GCVE-0-2014-7826)

Vulnerability from cvelistv5 – Published: 2014-11-10 11:00 – Updated: 2024-08-06 13:03

Summary

kernel/trace/trace_syscalls.c in the Linux kernel through 3.17.2 does not properly handle private syscall numbers during use of the ftrace subsystem, which allows local users to gain privileges or cause a denial of service (invalid pointer dereference) via a crafted application.

Severity

No CVSS data available.

CWE

Assigner

redhat CNA under the redhat root

CNA scorecard B 82/100 over 1039 records in the last 180 days details

References

11 references

URL	Tags
http://www.openwall.com/lists/oss-security/2014/1…	mailing-listx_refsource_MLIST
http://rhn.redhat.com/errata/RHSA-2015-0864.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-0290.html	vendor-advisoryx_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.securityfocus.com/bid/70971	vdb-entryx_refsource_BID
https://bugzilla.redhat.com/show_bug.cgi?id=1161565	x_refsource_CONFIRM
http://git.kernel.org/?p=linux/kernel/git/torvald…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2014-1943.html	vendor-advisoryx_refsource_REDHAT
https://github.com/torvalds/linux/commit/086ba77a…	x_refsource_CONFIRM

Date Public

2014-11-06 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T13:03:27.452Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[oss-security] 20141106 Exploitable issues in Linux perf/ftrace subsystems",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2014/11/06/11"
          },
          {
            "name": "RHSA-2015:0864",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0864.html"
          },
          {
            "name": "RHSA-2015:0290",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0290.html"
          },
          {
            "name": "SUSE-SU-2015:0481",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html"
          },
          {
            "name": "linux-kernel-cve20147826-dos(98556)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/98556"
          },
          {
            "name": "openSUSE-SU-2015:0566",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html"
          },
          {
            "name": "70971",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/70971"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1161565"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=086ba77a6db00ed858ff07451bedee197df868c9"
          },
          {
            "name": "RHSA-2014:1943",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1943.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/086ba77a6db00ed858ff07451bedee197df868c9"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-11-06T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "kernel/trace/trace_syscalls.c in the Linux kernel through 3.17.2 does not properly handle private syscall numbers during use of the ftrace subsystem, which allows local users to gain privileges or cause a denial of service (invalid pointer dereference) via a crafted application."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "[oss-security] 20141106 Exploitable issues in Linux perf/ftrace subsystems",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2014/11/06/11"
        },
        {
          "name": "RHSA-2015:0864",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0864.html"
        },
        {
          "name": "RHSA-2015:0290",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0290.html"
        },
        {
          "name": "SUSE-SU-2015:0481",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html"
        },
        {
          "name": "linux-kernel-cve20147826-dos(98556)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/98556"
        },
        {
          "name": "openSUSE-SU-2015:0566",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html"
        },
        {
          "name": "70971",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/70971"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1161565"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=086ba77a6db00ed858ff07451bedee197df868c9"
        },
        {
          "name": "RHSA-2014:1943",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-1943.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/torvalds/linux/commit/086ba77a6db00ed858ff07451bedee197df868c9"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2014-7826",
    "datePublished": "2014-11-10T11:00:00.000Z",
    "dateReserved": "2014-10-03T00:00:00.000Z",
    "dateUpdated": "2024-08-06T13:03:27.452Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2014-8086 (GCVE-0-2014-8086)

Vulnerability from cvelistv5 – Published: 2014-10-13 10:00 – Updated: 2024-08-06 13:10

Summary

Race condition in the ext4_file_write_iter function in fs/ext4/file.c in the Linux kernel through 3.17 allows local users to cause a denial of service (file unavailability) via a combination of a write action and an F_SETFL fcntl operation for the O_DIRECT flag.

Severity

No CVSS data available.

CWE

Assigner

mitre CNA under the mitre root

CNA scorecard E 29/100 over 2355 records in the last 180 days details

References

11 references

URL	Tags
https://lkml.org/lkml/2014/10/8/545	mailing-listx_refsource_MLIST
http://www.securityfocus.com/bid/70376	vdb-entryx_refsource_BID
http://www.spinics.net/lists/linux-ext4/msg45685.html	mailing-listx_refsource_MLIST
https://bugzilla.redhat.com/show_bug.cgi?id=1151353	x_refsource_CONFIRM
http://www.spinics.net/lists/linux-ext4/msg45683.html	mailing-listx_refsource_MLIST
http://rhn.redhat.com/errata/RHSA-2015-0694.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-0290.html	vendor-advisoryx_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
https://lkml.org/lkml/2014/10/9/129	mailing-listx_refsource_MLIST
http://www.openwall.com/lists/oss-security/2014/1…	mailing-listx_refsource_MLIST

Date Public

2014-10-08 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T13:10:50.624Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[linux-kernel] 20141008 ext4: kernel BUG at fs/ext4/inode.c:2959!",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lkml.org/lkml/2014/10/8/545"
          },
          {
            "name": "70376",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/70376"
          },
          {
            "name": "[linux-ext4] 20141009 [PATCH] add aio/dio regression test race between write and fcntl",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.spinics.net/lists/linux-ext4/msg45685.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1151353"
          },
          {
            "name": "[linux-ext4] 20141009 [PATCH] ext4: fix race between write and fcntl(F_SETFL)",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.spinics.net/lists/linux-ext4/msg45683.html"
          },
          {
            "name": "RHSA-2015:0694",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0694.html"
          },
          {
            "name": "RHSA-2015:0290",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0290.html"
          },
          {
            "name": "SUSE-SU-2015:1478",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00004.html"
          },
          {
            "name": "linux-kernel-cve20148086-dos(96922)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/96922"
          },
          {
            "name": "[linux-kernel] 20141009 Re: ext4: kernel BUG at fs/ext4/inode.c:2959!",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lkml.org/lkml/2014/10/9/129"
          },
          {
            "name": "[oss-security] 20141009 CVE-2014-8086 - Linux kernel ext4 race condition",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2014/10/09/25"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-10-08T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Race condition in the ext4_file_write_iter function in fs/ext4/file.c in the Linux kernel through 3.17 allows local users to cause a denial of service (file unavailability) via a combination of a write action and an F_SETFL fcntl operation for the O_DIRECT flag."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-07T15:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "[linux-kernel] 20141008 ext4: kernel BUG at fs/ext4/inode.c:2959!",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lkml.org/lkml/2014/10/8/545"
        },
        {
          "name": "70376",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/70376"
        },
        {
          "name": "[linux-ext4] 20141009 [PATCH] add aio/dio regression test race between write and fcntl",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.spinics.net/lists/linux-ext4/msg45685.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1151353"
        },
        {
          "name": "[linux-ext4] 20141009 [PATCH] ext4: fix race between write and fcntl(F_SETFL)",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.spinics.net/lists/linux-ext4/msg45683.html"
        },
        {
          "name": "RHSA-2015:0694",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0694.html"
        },
        {
          "name": "RHSA-2015:0290",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0290.html"
        },
        {
          "name": "SUSE-SU-2015:1478",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00004.html"
        },
        {
          "name": "linux-kernel-cve20148086-dos(96922)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/96922"
        },
        {
          "name": "[linux-kernel] 20141009 Re: ext4: kernel BUG at fs/ext4/inode.c:2959!",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lkml.org/lkml/2014/10/9/129"
        },
        {
          "name": "[oss-security] 20141009 CVE-2014-8086 - Linux kernel ext4 race condition",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2014/10/09/25"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2014-8086",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Race condition in the ext4_file_write_iter function in fs/ext4/file.c in the Linux kernel through 3.17 allows local users to cause a denial of service (file unavailability) via a combination of a write action and an F_SETFL fcntl operation for the O_DIRECT flag."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "[linux-kernel] 20141008 ext4: kernel BUG at fs/ext4/inode.c:2959!",
              "refsource": "MLIST",
              "url": "https://lkml.org/lkml/2014/10/8/545"
            },
            {
              "name": "70376",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/70376"
            },
            {
              "name": "[linux-ext4] 20141009 [PATCH] add aio/dio regression test race between write and fcntl",
              "refsource": "MLIST",
              "url": "http://www.spinics.net/lists/linux-ext4/msg45685.html"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1151353",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1151353"
            },
            {
              "name": "[linux-ext4] 20141009 [PATCH] ext4: fix race between write and fcntl(F_SETFL)",
              "refsource": "MLIST",
              "url": "http://www.spinics.net/lists/linux-ext4/msg45683.html"
            },
            {
              "name": "RHSA-2015:0694",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0694.html"
            },
            {
              "name": "RHSA-2015:0290",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0290.html"
            },
            {
              "name": "SUSE-SU-2015:1478",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00004.html"
            },
            {
              "name": "linux-kernel-cve20148086-dos(96922)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/96922"
            },
            {
              "name": "[linux-kernel] 20141009 Re: ext4: kernel BUG at fs/ext4/inode.c:2959!",
              "refsource": "MLIST",
              "url": "https://lkml.org/lkml/2014/10/9/129"
            },
            {
              "name": "[oss-security] 20141009 CVE-2014-8086 - Linux kernel ext4 race condition",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2014/10/09/25"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2014-8086",
    "datePublished": "2014-10-13T10:00:00.000Z",
    "dateReserved": "2014-10-09T00:00:00.000Z",
    "dateUpdated": "2024-08-06T13:10:50.624Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2014-8160 (GCVE-0-2014-8160)

Vulnerability from cvelistv5 – Published: 2015-03-02 11:00 – Updated: 2024-08-06 13:10

Summary

net/netfilter/nf_conntrack_proto_generic.c in the Linux kernel before 3.18 generates incorrect conntrack entries during handling of certain iptables rule sets for the SCTP, DCCP, GRE, and UDP-Lite protocols, which allows remote attackers to bypass intended access restrictions via packets with disallowed port numbers.

Severity

No CVSS data available.

CWE

Assigner

redhat CNA under the redhat root

CNA scorecard B 82/100 over 1039 records in the last 180 days details

References

22 references

URL	Tags
http://www.ubuntu.com/usn/USN-2515-1	vendor-advisoryx_refsource_UBUNTU
http://www.debian.org/security/2015/dsa-3170	vendor-advisoryx_refsource_DEBIAN
https://github.com/torvalds/linux/commit/db29a950…	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.securityfocus.com/bid/72061	vdb-entryx_refsource_BID
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.ubuntu.com/usn/USN-2514-1	vendor-advisoryx_refsource_UBUNTU
http://www.ubuntu.com/usn/USN-2518-1	vendor-advisoryx_refsource_UBUNTU
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://rhn.redhat.com/errata/RHSA-2015-0290.html	vendor-advisoryx_refsource_REDHAT
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://www.spinics.net/lists/netfilter-devel/msg3…	mailing-listx_refsource_MLIST
http://git.kernel.org/?p=linux/kernel/git/torvald…	x_refsource_CONFIRM
https://bugzilla.redhat.com/show_bug.cgi?id=1182059	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2015-0284.html	vendor-advisoryx_refsource_REDHAT
http://www.openwall.com/lists/oss-security/2015/01/14/3	mailing-listx_refsource_MLIST
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.ubuntu.com/usn/USN-2517-1	vendor-advisoryx_refsource_UBUNTU
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.ubuntu.com/usn/USN-2516-1	vendor-advisoryx_refsource_UBUNTU
http://www.ubuntu.com/usn/USN-2513-1	vendor-advisoryx_refsource_UBUNTU
http://rhn.redhat.com/errata/RHSA-2015-0674.html	vendor-advisoryx_refsource_REDHAT

Date Public

2014-09-25 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T13:10:51.112Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "USN-2515-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2515-1"
          },
          {
            "name": "DSA-3170",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3170"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/db29a9508a9246e77087c5531e45b2c88ec6988b"
          },
          {
            "name": "SUSE-SU-2015:0736",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html"
          },
          {
            "name": "72061",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/72061"
          },
          {
            "name": "SUSE-SU-2015:0652",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00000.html"
          },
          {
            "name": "USN-2514-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2514-1"
          },
          {
            "name": "USN-2518-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2518-1"
          },
          {
            "name": "MDVSA-2015:057",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:057"
          },
          {
            "name": "RHSA-2015:0290",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0290.html"
          },
          {
            "name": "MDVSA-2015:058",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:058"
          },
          {
            "name": "[netfilter-devel] 20140925 [PATCH nf] netfilter: conntrack: disable generic protocol tracking",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.spinics.net/lists/netfilter-devel/msg33430.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=db29a9508a9246e77087c5531e45b2c88ec6988b"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1182059"
          },
          {
            "name": "RHSA-2015:0284",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0284.html"
          },
          {
            "name": "[oss-security] 20150114 CVE-2014-8160 Linux Kernel: SCTP firewalling fails until SCTP module is loaded",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2015/01/14/3"
          },
          {
            "name": "SUSE-SU-2015:0529",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00020.html"
          },
          {
            "name": "USN-2517-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2517-1"
          },
          {
            "name": "openSUSE-SU-2015:0714",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00009.html"
          },
          {
            "name": "USN-2516-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2516-1"
          },
          {
            "name": "USN-2513-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2513-1"
          },
          {
            "name": "RHSA-2015:0674",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0674.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-09-25T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "net/netfilter/nf_conntrack_proto_generic.c in the Linux kernel before 3.18 generates incorrect conntrack entries during handling of certain iptables rule sets for the SCTP, DCCP, GRE, and UDP-Lite protocols, which allows remote attackers to bypass intended access restrictions via packets with disallowed port numbers."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-12-30T16:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "USN-2515-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2515-1"
        },
        {
          "name": "DSA-3170",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3170"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/torvalds/linux/commit/db29a9508a9246e77087c5531e45b2c88ec6988b"
        },
        {
          "name": "SUSE-SU-2015:0736",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html"
        },
        {
          "name": "72061",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/72061"
        },
        {
          "name": "SUSE-SU-2015:0652",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00000.html"
        },
        {
          "name": "USN-2514-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2514-1"
        },
        {
          "name": "USN-2518-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2518-1"
        },
        {
          "name": "MDVSA-2015:057",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:057"
        },
        {
          "name": "RHSA-2015:0290",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0290.html"
        },
        {
          "name": "MDVSA-2015:058",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:058"
        },
        {
          "name": "[netfilter-devel] 20140925 [PATCH nf] netfilter: conntrack: disable generic protocol tracking",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.spinics.net/lists/netfilter-devel/msg33430.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=db29a9508a9246e77087c5531e45b2c88ec6988b"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1182059"
        },
        {
          "name": "RHSA-2015:0284",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0284.html"
        },
        {
          "name": "[oss-security] 20150114 CVE-2014-8160 Linux Kernel: SCTP firewalling fails until SCTP module is loaded",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2015/01/14/3"
        },
        {
          "name": "SUSE-SU-2015:0529",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00020.html"
        },
        {
          "name": "USN-2517-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2517-1"
        },
        {
          "name": "openSUSE-SU-2015:0714",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00009.html"
        },
        {
          "name": "USN-2516-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2516-1"
        },
        {
          "name": "USN-2513-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2513-1"
        },
        {
          "name": "RHSA-2015:0674",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0674.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2014-8160",
    "datePublished": "2015-03-02T11:00:00.000Z",
    "dateReserved": "2014-10-10T00:00:00.000Z",
    "dateUpdated": "2024-08-06T13:10:51.112Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2014-8172 (GCVE-0-2014-8172)

Vulnerability from cvelistv5 – Published: 2015-03-16 10:00 – Updated: 2024-08-06 13:10

Summary

The filesystem implementation in the Linux kernel before 3.13 performs certain operations on lists of files with an inappropriate locking approach, which allows local users to cause a denial of service (soft lockup or system crash) via unspecified use of Asynchronous I/O (AIO) operations.

Severity

No CVSS data available.

CWE

Assigner

redhat CNA under the redhat root

CNA scorecard B 82/100 over 1039 records in the last 180 days details

References

6 references

URL	Tags
http://www.openwall.com/lists/oss-security/2015/03/09/3	mailing-listx_refsource_MLIST
http://git.kernel.org/?p=linux/kernel/git/torvald…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2015-0694.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-0290.html	vendor-advisoryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=1198503	x_refsource_CONFIRM
https://github.com/torvalds/linux/commit/eee5cc27…	x_refsource_CONFIRM

Date Public

2013-11-09 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T13:10:50.979Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[oss-security] 20150309 CVE-2014-8172",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2015/03/09/3"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=eee5cc2702929fd41cce28058dc6d6717f723f87"
          },
          {
            "name": "RHSA-2015:0694",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0694.html"
          },
          {
            "name": "RHSA-2015:0290",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0290.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1198503"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/eee5cc2702929fd41cce28058dc6d6717f723f87"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-11-09T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The filesystem implementation in the Linux kernel before 3.13 performs certain operations on lists of files with an inappropriate locking approach, which allows local users to cause a denial of service (soft lockup or system crash) via unspecified use of Asynchronous I/O (AIO) operations."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2015-03-19T12:57:00.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "[oss-security] 20150309 CVE-2014-8172",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2015/03/09/3"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=eee5cc2702929fd41cce28058dc6d6717f723f87"
        },
        {
          "name": "RHSA-2015:0694",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0694.html"
        },
        {
          "name": "RHSA-2015:0290",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0290.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1198503"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/torvalds/linux/commit/eee5cc2702929fd41cce28058dc6d6717f723f87"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2014-8172",
    "datePublished": "2015-03-16T10:00:00.000Z",
    "dateReserved": "2014-10-10T00:00:00.000Z",
    "dateUpdated": "2024-08-06T13:10:50.979Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2014-8173 (GCVE-0-2014-8173)

Vulnerability from cvelistv5 – Published: 2015-03-16 10:00 – Updated: 2024-08-06 13:10

Summary

The pmd_none_or_trans_huge_or_clear_bad function in include/asm-generic/pgtable.h in the Linux kernel before 3.13 on NUMA systems does not properly determine whether a Page Middle Directory (PMD) entry is a transparent huge-table entry, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a crafted MADV_WILLNEED madvise system call that leverages the absence of a page-table lock.

Severity

No CVSS data available.

CWE

Assigner

redhat CNA under the redhat root

CNA scorecard B 82/100 over 1039 records in the last 180 days details

References

6 references

URL	Tags
https://bugzilla.redhat.com/show_bug.cgi?id=1198457	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2015-0694.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-0290.html	vendor-advisoryx_refsource_REDHAT
http://git.kernel.org/?p=linux/kernel/git/torvald…	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://github.com/torvalds/linux/commit/ee53664b…	x_refsource_CONFIRM

Date Public

2013-12-20 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T13:10:51.008Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1198457"
          },
          {
            "name": "RHSA-2015:0694",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0694.html"
          },
          {
            "name": "RHSA-2015:0290",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0290.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ee53664bda169f519ce3c6a22d378f0b946c8178"
          },
          {
            "name": "openSUSE-SU-2015:0714",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00009.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/ee53664bda169f519ce3c6a22d378f0b946c8178"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-12-20T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The pmd_none_or_trans_huge_or_clear_bad function in include/asm-generic/pgtable.h in the Linux kernel before 3.13 on NUMA systems does not properly determine whether a Page Middle Directory (PMD) entry is a transparent huge-table entry, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a crafted MADV_WILLNEED madvise system call that leverages the absence of a page-table lock."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-12-30T16:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1198457"
        },
        {
          "name": "RHSA-2015:0694",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0694.html"
        },
        {
          "name": "RHSA-2015:0290",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0290.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ee53664bda169f519ce3c6a22d378f0b946c8178"
        },
        {
          "name": "openSUSE-SU-2015:0714",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00009.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/torvalds/linux/commit/ee53664bda169f519ce3c6a22d378f0b946c8178"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2014-8173",
    "datePublished": "2015-03-16T10:00:00.000Z",
    "dateReserved": "2014-10-10T00:00:00.000Z",
    "dateUpdated": "2024-08-06T13:10:51.008Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2014-8709 (GCVE-0-2014-8709)

Vulnerability from cvelistv5 – Published: 2014-11-10 11:00 – Updated: 2024-08-06 13:26

Summary

The ieee80211_fragment function in net/mac80211/tx.c in the Linux kernel before 3.13.5 does not properly maintain a certain tail pointer, which allows remote attackers to obtain sensitive cleartext information by reading packets.

Severity

No CVSS data available.

CWE

Assigner

microfocus CNA

CNA scorecard – unranked: 0 records in the last 180 days, 10 needed details

References

13 references

URL	Tags
http://www.securitytracker.com/id/1037968	vdb-entryx_refsource_SECTRACK
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://github.com/torvalds/linux/commit/338f977f…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2015-0290.html	vendor-advisoryx_refsource_REDHAT
http://www.kernel.org/pub/linux/kernel/v3.x/Chang…	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.openwall.com/lists/oss-security/2014/11/09/1	mailing-listx_refsource_MLIST
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
http://rhn.redhat.com/errata/RHSA-2015-1272.html	vendor-advisoryx_refsource_REDHAT
http://www.securityfocus.com/bid/70965	vdb-entryx_refsource_BID
https://source.android.com/security/bulletin/2017…	x_refsource_CONFIRM
http://git.kernel.org/?p=linux/kernel/git/torvald…	x_refsource_CONFIRM

Date Public

2014-02-22 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T13:26:02.590Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "1037968",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037968"
          },
          {
            "name": "SUSE-SU-2015:0652",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00000.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/338f977f4eb441e69bb9a46eaa0ac715c931a67f"
          },
          {
            "name": "RHSA-2015:0290",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0290.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.13.5"
          },
          {
            "name": "SUSE-SU-2015:0481",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html"
          },
          {
            "name": "openSUSE-SU-2015:0566",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html"
          },
          {
            "name": "[oss-security] 20141109 Re: CVE Request: Linux kernel mac80211 plain text leak",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2014/11/09/1"
          },
          {
            "name": "linux-kernel-cve20148709-info-disclsoure(98922)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/98922"
          },
          {
            "name": "RHSA-2015:1272",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1272.html"
          },
          {
            "name": "70965",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/70965"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://source.android.com/security/bulletin/2017-03-01.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=338f977f4eb441e69bb9a46eaa0ac715c931a67f"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-02-22T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The ieee80211_fragment function in net/mac80211/tx.c in the Linux kernel before 3.13.5 does not properly maintain a certain tail pointer, which allows remote attackers to obtain sensitive cleartext information by reading packets."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-01-06T16:15:25.000Z",
        "orgId": "f81092c5-7f14-476d-80dc-24857f90be84",
        "shortName": "microfocus"
      },
      "references": [
        {
          "name": "1037968",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037968"
        },
        {
          "name": "SUSE-SU-2015:0652",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00000.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/torvalds/linux/commit/338f977f4eb441e69bb9a46eaa0ac715c931a67f"
        },
        {
          "name": "RHSA-2015:0290",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0290.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.13.5"
        },
        {
          "name": "SUSE-SU-2015:0481",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html"
        },
        {
          "name": "openSUSE-SU-2015:0566",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html"
        },
        {
          "name": "[oss-security] 20141109 Re: CVE Request: Linux kernel mac80211 plain text leak",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2014/11/09/1"
        },
        {
          "name": "linux-kernel-cve20148709-info-disclsoure(98922)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/98922"
        },
        {
          "name": "RHSA-2015:1272",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1272.html"
        },
        {
          "name": "70965",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/70965"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://source.android.com/security/bulletin/2017-03-01.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=338f977f4eb441e69bb9a46eaa0ac715c931a67f"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@microfocus.com",
          "ID": "CVE-2014-8709",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The ieee80211_fragment function in net/mac80211/tx.c in the Linux kernel before 3.13.5 does not properly maintain a certain tail pointer, which allows remote attackers to obtain sensitive cleartext information by reading packets."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "1037968",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1037968"
            },
            {
              "name": "SUSE-SU-2015:0652",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00000.html"
            },
            {
              "name": "https://github.com/torvalds/linux/commit/338f977f4eb441e69bb9a46eaa0ac715c931a67f",
              "refsource": "CONFIRM",
              "url": "https://github.com/torvalds/linux/commit/338f977f4eb441e69bb9a46eaa0ac715c931a67f"
            },
            {
              "name": "RHSA-2015:0290",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0290.html"
            },
            {
              "name": "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.13.5",
              "refsource": "CONFIRM",
              "url": "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.13.5"
            },
            {
              "name": "SUSE-SU-2015:0481",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html"
            },
            {
              "name": "openSUSE-SU-2015:0566",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html"
            },
            {
              "name": "[oss-security] 20141109 Re: CVE Request: Linux kernel mac80211 plain text leak",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2014/11/09/1"
            },
            {
              "name": "linux-kernel-cve20148709-info-disclsoure(98922)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/98922"
            },
            {
              "name": "RHSA-2015:1272",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1272.html"
            },
            {
              "name": "70965",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/70965"
            },
            {
              "name": "https://source.android.com/security/bulletin/2017-03-01.html",
              "refsource": "CONFIRM",
              "url": "https://source.android.com/security/bulletin/2017-03-01.html"
            },
            {
              "name": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=338f977f4eb441e69bb9a46eaa0ac715c931a67f",
              "refsource": "CONFIRM",
              "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=338f977f4eb441e69bb9a46eaa0ac715c931a67f"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f81092c5-7f14-476d-80dc-24857f90be84",
    "assignerShortName": "microfocus",
    "cveId": "CVE-2014-8709",
    "datePublished": "2014-11-10T11:00:00.000Z",
    "dateReserved": "2014-11-09T00:00:00.000Z",
    "dateUpdated": "2024-08-06T13:26:02.590Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2014-8884 (GCVE-0-2014-8884)

Vulnerability from cvelistv5 – Published: 2014-11-30 01:00 – Updated: 2024-08-06 13:33

Summary

Stack-based buffer overflow in the ttusbdecfe_dvbs_diseqc_send_master_cmd function in drivers/media/usb/ttusb-dec/ttusbdecfe.c in the Linux kernel before 3.17.4 allows local users to cause a denial of service (system crash) or possibly gain privileges via a large message length in an ioctl call.

Severity

No CVSS data available.

CWE

Assigner

microfocus CNA

CNA scorecard – unranked: 0 records in the last 180 days, 10 needed details

References

10 references

URL	Tags
http://www.openwall.com/lists/oss-security/2014/11/14/7	mailing-listx_refsource_MLIST
http://git.kernel.org/?p=linux/kernel/git/torvald…	x_refsource_CONFIRM
http://www.debian.org/security/2014/dsa-3093	vendor-advisoryx_refsource_DEBIAN
http://rhn.redhat.com/errata/RHSA-2015-0864.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-0290.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-0782.html	vendor-advisoryx_refsource_REDHAT
https://github.com/torvalds/linux/commit/f2e323ec…	x_refsource_CONFIRM
http://www.kernel.org/pub/linux/kernel/v3.x/Chang…	x_refsource_CONFIRM
http://secunia.com/advisories/62305	third-party-advisoryx_refsource_SECUNIA
https://bugzilla.redhat.com/show_bug.cgi?id=1164266	x_refsource_CONFIRM

Date Public

2014-11-14 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T13:33:11.908Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[oss-security] 20141114 Re: CVE Request: Linux kernel: ttusb-dec: overflow by descriptor",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2014/11/14/7"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f2e323ec96077642d397bb1c355def536d489d16"
          },
          {
            "name": "DSA-3093",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-3093"
          },
          {
            "name": "RHSA-2015:0864",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0864.html"
          },
          {
            "name": "RHSA-2015:0290",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0290.html"
          },
          {
            "name": "RHSA-2015:0782",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0782.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/f2e323ec96077642d397bb1c355def536d489d16"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.17.4"
          },
          {
            "name": "62305",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/62305"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1164266"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-11-14T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Stack-based buffer overflow in the ttusbdecfe_dvbs_diseqc_send_master_cmd function in drivers/media/usb/ttusb-dec/ttusbdecfe.c in the Linux kernel before 3.17.4 allows local users to cause a denial of service (system crash) or possibly gain privileges via a large message length in an ioctl call."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-01-06T16:15:42.000Z",
        "orgId": "f81092c5-7f14-476d-80dc-24857f90be84",
        "shortName": "microfocus"
      },
      "references": [
        {
          "name": "[oss-security] 20141114 Re: CVE Request: Linux kernel: ttusb-dec: overflow by descriptor",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2014/11/14/7"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f2e323ec96077642d397bb1c355def536d489d16"
        },
        {
          "name": "DSA-3093",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-3093"
        },
        {
          "name": "RHSA-2015:0864",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0864.html"
        },
        {
          "name": "RHSA-2015:0290",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0290.html"
        },
        {
          "name": "RHSA-2015:0782",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0782.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/torvalds/linux/commit/f2e323ec96077642d397bb1c355def536d489d16"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.17.4"
        },
        {
          "name": "62305",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/62305"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1164266"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@microfocus.com",
          "ID": "CVE-2014-8884",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Stack-based buffer overflow in the ttusbdecfe_dvbs_diseqc_send_master_cmd function in drivers/media/usb/ttusb-dec/ttusbdecfe.c in the Linux kernel before 3.17.4 allows local users to cause a denial of service (system crash) or possibly gain privileges via a large message length in an ioctl call."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "[oss-security] 20141114 Re: CVE Request: Linux kernel: ttusb-dec: overflow by descriptor",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2014/11/14/7"
            },
            {
              "name": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=f2e323ec96077642d397bb1c355def536d489d16",
              "refsource": "CONFIRM",
              "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=f2e323ec96077642d397bb1c355def536d489d16"
            },
            {
              "name": "DSA-3093",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2014/dsa-3093"
            },
            {
              "name": "RHSA-2015:0864",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0864.html"
            },
            {
              "name": "RHSA-2015:0290",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0290.html"
            },
            {
              "name": "RHSA-2015:0782",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0782.html"
            },
            {
              "name": "https://github.com/torvalds/linux/commit/f2e323ec96077642d397bb1c355def536d489d16",
              "refsource": "CONFIRM",
              "url": "https://github.com/torvalds/linux/commit/f2e323ec96077642d397bb1c355def536d489d16"
            },
            {
              "name": "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.17.4",
              "refsource": "CONFIRM",
              "url": "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.17.4"
            },
            {
              "name": "62305",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/62305"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1164266",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1164266"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f81092c5-7f14-476d-80dc-24857f90be84",
    "assignerShortName": "microfocus",
    "cveId": "CVE-2014-8884",
    "datePublished": "2014-11-30T01:00:00.000Z",
    "dateReserved": "2014-11-14T00:00:00.000Z",
    "dateUpdated": "2024-08-06T13:33:11.908Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

RHSA-2015:0290

CVE-2014-3690 (GCVE-0-2014-3690)

CVE-2014-3940 (GCVE-0-2014-3940)

CVE-2014-7825 (GCVE-0-2014-7825)

CVE-2014-7826 (GCVE-0-2014-7826)

CVE-2014-8086 (GCVE-0-2014-8086)

CVE-2014-8160 (GCVE-0-2014-8160)

CVE-2014-8172 (GCVE-0-2014-8172)

CVE-2014-8173 (GCVE-0-2014-8173)

CVE-2014-8709 (GCVE-0-2014-8709)

CVE-2014-8884 (GCVE-0-2014-8884)

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour