CVE

Id
67590  
CVE No.
CVE-2014-0181  
Status
Candidate  
Description
The Netlink implementation in the Linux kernel through 3.14.1 does not provide a mechanism for authorizing socket operations based on the opener of a socket, which allows local users to bypass intended access restrictions and modify network configurations by using a Netlink socket for the (1) stdout or (2) stderr of a setuid program.  
Phase
Assigned (20131203)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
651904 67590 CVE-2014-0181 MLIST:[netdev] 20140423 [PATCH 0/5]: Preventing abuse when passing file descriptors  View
651905 67590 CVE-2014-0181 URL:http://marc.info/?l=linux-netdev&m=139828832919748&w=2  View
651906 67590 CVE-2014-0181 MLIST:[oss-security] 20140423 Re: CVE-2014-0181: Linux network reconfiguration due to incorrect netlink checks  View
651907 67590 CVE-2014-0181 URL:http://www.openwall.com/lists/oss-security/2014/04/23/6  View
651908 67590 CVE-2014-0181 CONFIRM:https://git.kernel.org/cgit/linux/kernel/git/davem/net.git/commit/?id=90f62cf30a78721641e08737bda787552428061e  View
651909 67590 CVE-2014-0181 CONFIRM:https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.10.45  View
651910 67590 CVE-2014-0181 CONFIRM:https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.9  View
651911 67590 CVE-2014-0181 REDHAT:RHSA-2014:1959  View
651912 67590 CVE-2014-0181 URL:http://rhn.redhat.com/errata/RHSA-2014-1959.html  View
651913 67590 CVE-2014-0181 SUSE:SUSE-SU-2015:0481  View
651914 67590 CVE-2014-0181 URL:http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html  View
651915 67590 CVE-2014-0181 SUSE:openSUSE-SU-2015:0566  View
651916 67590 CVE-2014-0181 URL:http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html  View
651917 67590 CVE-2014-0181 SUSE:SUSE-SU-2015:0652  View
651918 67590 CVE-2014-0181 URL:http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00000.html  View
651919 67590 CVE-2014-0181 SUSE:SUSE-SU-2015:0812  View
651920 67590 CVE-2014-0181 URL:http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html  View
651921 67590 CVE-2014-0181 SUSE:SUSE-SU-2015:0736  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
13484 JVNDB-2014-002359 virt-who におけるハイパーバイザーのパスワードを取得される脆弱性 virt-who は、/etc/sysconfig/virt-who に誰でも読み取り可能な権限 (world-readable permission) を使用するため、ハイパーバイザーのパスワードを取得される脆弱性が存在します。 CVE-2014-0189 67590 2.1 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-002359.html  View