CVE-2014-1738

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2014-1738
The raw_cmd_copyout function in drivers/block/floppy.c in the Linux kernel through 3.14.3 does not properly restrict access to certain pointers during processing of an FDRAWCMD ioctl call, which allows local users to obtain sensitive information from kernel heap memory by leveraging write access to a /dev/fd device.

2.1 /10

CVSS v2.0 : LOW

V2 Legend

Vector : AV:L/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 3.9 / Impact : 2.9

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References
Link Resource
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=2145e15e0557a01b9195d1c7199a1b92cb9be81f
http://linux.oracle.com/errata/ELSA-2014-0771.html
http://linux.oracle.com/errata/ELSA-2014-3043.html
http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00007.html
http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00012.html
http://rhn.redhat.com/errata/RHSA-2014-0800.html
http://rhn.redhat.com/errata/RHSA-2014-0801.html
http://secunia.com/advisories/59262
http://secunia.com/advisories/59309
http://secunia.com/advisories/59406
http://secunia.com/advisories/59599
http://www.debian.org/security/2014/dsa-2926
http://www.debian.org/security/2014/dsa-2928
http://www.openwall.com/lists/oss-security/2014/05/09/2
http://www.securityfocus.com/bid/67302
http://www.securitytracker.com/id/1030474
https://bugzilla.redhat.com/show_bug.cgi?id=1094299
https://github.com/torvalds/linux/commit/2145e15e0557a01b9195d1c7199a1b92cb9be81f
Configurations

Configuration 1 (hide)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:o:redhat:enterprise_linux_eus:5.6:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_eus:6.3:*:*:*:*:*:*:*

Configuration 3 (hide)

OR cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*

Configuration 4 (hide)

OR cpe:2.3:o:oracle:linux:5:-:*:*:*:*:*:*
cpe:2.3:o:oracle:linux:6:-:*:*:*:*:*:*

Configuration 5 (hide)

OR cpe:2.3:o:suse:linux_enterprise_desktop:11:sp3:*:*:*:*:*:*
cpe:2.3:o:suse:linux_enterprise_high_availability_extension:11:sp3:*:*:*:*:*:*
cpe:2.3:o:suse:linux_enterprise_real_time_extension:11:sp3:*:*:*:*:*:*
cpe:2.3:o:suse:linux_enterprise_server:11:sp3:*:*:*:-:*:*
cpe:2.3:o:suse:linux_enterprise_server:11:sp3:*:*:*:vmware:*:*
History

07 Nov 2023, 02:19

Type Values Removed Values Added
References
  • {'url': 'http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=2145e15e0557a01b9195d1c7199a1b92cb9be81f', 'name': 'http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=2145e15e0557a01b9195d1c7199a1b92cb9be81f', 'tags': ['Mailing List', 'Patch', 'Vendor Advisory'], 'refsource': 'CONFIRM'}
  • () http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=2145e15e0557a01b9195d1c7199a1b92cb9be81f -
References (DEBIAN) http://www.debian.org/security/2014/dsa-2926 - Third Party Advisory () http://www.debian.org/security/2014/dsa-2926 -
References (SECUNIA) http://secunia.com/advisories/59406 - Broken Link () http://secunia.com/advisories/59406 -
References (SUSE) http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00012.html - Mailing List, Third Party Advisory () http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00012.html -
References (REDHAT) http://rhn.redhat.com/errata/RHSA-2014-0801.html - Third Party Advisory () http://rhn.redhat.com/errata/RHSA-2014-0801.html -
References (CONFIRM) https://github.com/torvalds/linux/commit/2145e15e0557a01b9195d1c7199a1b92cb9be81f - Patch, Third Party Advisory () https://github.com/torvalds/linux/commit/2145e15e0557a01b9195d1c7199a1b92cb9be81f -
References (SUSE) http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00007.html - Mailing List, Third Party Advisory () http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00007.html -
References (CONFIRM) https://bugzilla.redhat.com/show_bug.cgi?id=1094299 - Issue Tracking, Patch, Third Party Advisory () https://bugzilla.redhat.com/show_bug.cgi?id=1094299 -
References (SECUNIA) http://secunia.com/advisories/59599 - Broken Link () http://secunia.com/advisories/59599 -
References (CONFIRM) http://linux.oracle.com/errata/ELSA-2014-3043.html - Third Party Advisory () http://linux.oracle.com/errata/ELSA-2014-3043.html -
References (SECUNIA) http://secunia.com/advisories/59309 - Broken Link () http://secunia.com/advisories/59309 -
References (REDHAT) http://rhn.redhat.com/errata/RHSA-2014-0800.html - Third Party Advisory () http://rhn.redhat.com/errata/RHSA-2014-0800.html -
References (DEBIAN) http://www.debian.org/security/2014/dsa-2928 - Third Party Advisory () http://www.debian.org/security/2014/dsa-2928 -
References (CONFIRM) http://linux.oracle.com/errata/ELSA-2014-0771.html - Third Party Advisory () http://linux.oracle.com/errata/ELSA-2014-0771.html -
References (SECUNIA) http://secunia.com/advisories/59262 - Broken Link () http://secunia.com/advisories/59262 -
References (BID) http://www.securityfocus.com/bid/67302 - Third Party Advisory, VDB Entry () http://www.securityfocus.com/bid/67302 -
References (SECTRACK) http://www.securitytracker.com/id/1030474 - Third Party Advisory, VDB Entry () http://www.securitytracker.com/id/1030474 -
References (MLIST) http://www.openwall.com/lists/oss-security/2014/05/09/2 - Mailing List, Third Party Advisory () http://www.openwall.com/lists/oss-security/2014/05/09/2 -
Information

Published : 2014-05-11 21:55

Updated : 2023-12-10 11:31

NVD link : CVE-2014-1738

Mitre link : CVE-2014-1738

CVE.ORG link : CVE-2014-1738

JSON object : View

Products Affected

redhat

  • enterprise_linux_eus

suse

  • linux_enterprise_desktop
  • linux_enterprise_high_availability_extension
  • linux_enterprise_server
  • linux_enterprise_real_time_extension

debian

  • debian_linux

linux

  • linux_kernel

oracle

  • linux
CWE
CWE-200

Exposure of Sensitive Information to an Unauthorized Actor