CVE

Id
71950  
CVE No.
CVE-2014-4653  
Status
Candidate  
Description
sound/core/control.c in the ALSA control implementation in the Linux kernel before 3.15.2 does not ensure possession of a read/write lock, which allows local users to cause a denial of service (use-after-free) and obtain sensitive information from kernel memory by leveraging /dev/snd/controlCX access.  
Phase
Assigned (20140625)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
682596 71950 CVE-2014-4653 MLIST:[oss-security] 20140626 Re: CVE Request: Linux kernel ALSA core control API vulnerabilities  View
682597 71950 CVE-2014-4653 URL:http://www.openwall.com/lists/oss-security/2014/06/26/6  View
682598 71950 CVE-2014-4653 CONFIRM:http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=fd9f26e4eca5d08a27d12c0933fceef76ed9663d  View
682599 71950 CVE-2014-4653 CONFIRM:http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.15.2  View
682600 71950 CVE-2014-4653 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=1113409  View
682601 71950 CVE-2014-4653 CONFIRM:https://github.com/torvalds/linux/commit/fd9f26e4eca5d08a27d12c0933fceef76ed9663d  View
682602 71950 CVE-2014-4653 REDHAT:RHSA-2014:1083  View
682603 71950 CVE-2014-4653 URL:http://rhn.redhat.com/errata/RHSA-2014-1083.html  View
682604 71950 CVE-2014-4653 SUSE:SUSE-SU-2015:0812  View
682605 71950 CVE-2014-4653 URL:http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html  View
682606 71950 CVE-2014-4653 UBUNTU:USN-2334-1  View
682607 71950 CVE-2014-4653 URL:http://www.ubuntu.com/usn/USN-2334-1  View
682608 71950 CVE-2014-4653 UBUNTU:USN-2335-1  View
682609 71950 CVE-2014-4653 URL:http://www.ubuntu.com/usn/USN-2335-1  View
682610 71950 CVE-2014-4653 BID:68164  View
682611 71950 CVE-2014-4653 URL:http://www.securityfocus.com/bid/68164  View
682612 71950 CVE-2014-4653 SECUNIA:59434  View
682613 71950 CVE-2014-4653 URL:http://secunia.com/advisories/59434  View
682614 71950 CVE-2014-4653 SECUNIA:59777  View
682615 71950 CVE-2014-4653 URL:http://secunia.com/advisories/59777  View
682616 71950 CVE-2014-4653 SECUNIA:60564  View
682617 71950 CVE-2014-4653 URL:http://secunia.com/advisories/60564  View
682618 71950 CVE-2014-4653 SECUNIA:60545  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
15769 JVNDB-2014-004644 HP Records Manager におけるクロスサイトスクリプティングの脆弱性 HP Records Manager には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2014-4661 71950 4.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-004644.html  View