CVE-2014-3180

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2014-3180
In kernel/compat.c in the Linux kernel before 3.17, as used in Google Chrome OS and other products, there is a possible out-of-bounds read. restart_syscall uses uninitialized data when restarting compat_sys_nanosleep. NOTE: this is disputed because the code path is unreachable

9.1 /10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.2

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

6.4 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:L/Au:N/C:P/I:N/A:P

Exploitability : 10.0 / Impact : 4.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact PARTIAL

References
Link Resource
https://bugs.chromium.org/p/chromium/issues/detail?id=408827
https://lkml.org/lkml/2014/9/7/29
Configurations

Configuration 1 (hide)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Configuration 2 (hide)

cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*
History

07 Nov 2023, 02:19

Type Values Removed Values Added
Summary ** DISPUTED ** In kernel/compat.c in the Linux kernel before 3.17, as used in Google Chrome OS and other products, there is a possible out-of-bounds read. restart_syscall uses uninitialized data when restarting compat_sys_nanosleep. NOTE: this is disputed because the code path is unreachable. In kernel/compat.c in the Linux kernel before 3.17, as used in Google Chrome OS and other products, there is a possible out-of-bounds read. restart_syscall uses uninitialized data when restarting compat_sys_nanosleep. NOTE: this is disputed because the code path is unreachable
References (MISC) https://lkml.org/lkml/2014/9/7/29 - Patch, Third Party Advisory () https://lkml.org/lkml/2014/9/7/29 -
References (MISC) https://bugs.chromium.org/p/chromium/issues/detail?id=408827 - Third Party Advisory () https://bugs.chromium.org/p/chromium/issues/detail?id=408827 -
Information

Published : 2019-11-06 20:15

Updated : 2024-04-11 00:51

NVD link : CVE-2014-3180

Mitre link : CVE-2014-3180

CVE.ORG link : CVE-2014-3180

JSON object : View

Products Affected

linux

  • linux_kernel

google

  • chrome_os
CWE
CWE-125

Out-of-bounds Read