CVE

Id
75271  
CVE No.
CVE-2014-7970  
Status
Candidate  
Description
The pivot_root implementation in fs/namespace.c in the Linux kernel through 3.17 does not properly interact with certain locations of a chroot directory, which allows local users to cause a denial of service (mount-tree loop) via . (dot) values in both arguments to the pivot_root system call.  
Phase
Assigned (20141008)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
698486 75271 CVE-2014-7970 MLIST:[linux-fsdevel] 20141008 [PATCH] mnt: Prevent pivot_root from creating a loop in the mount tree  View
698487 75271 CVE-2014-7970 URL:http://www.spinics.net/lists/linux-fsdevel/msg79153.html  View
698488 75271 CVE-2014-7970 MLIST:[oss-security] 20141008 CVE-2014-7970: Linux VFS denial of service  View
698489 75271 CVE-2014-7970 URL:http://www.openwall.com/lists/oss-security/2014/10/08/21  View
698490 75271 CVE-2014-7970 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=1151095  View
698491 75271 CVE-2014-7970 CONFIRM:https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0d0826019e529f21c84687521d03f60cd241ca7d  View
698492 75271 CVE-2014-7970 SUSE:SUSE-SU-2015:0736  View
698493 75271 CVE-2014-7970 URL:http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html  View
698494 75271 CVE-2014-7970 UBUNTU:USN-2419-1  View
698495 75271 CVE-2014-7970 URL:http://www.ubuntu.com/usn/USN-2419-1  View
698496 75271 CVE-2014-7970 UBUNTU:USN-2420-1  View
698497 75271 CVE-2014-7970 URL:http://www.ubuntu.com/usn/USN-2420-1  View
698498 75271 CVE-2014-7970 UBUNTU:USN-2513-1  View
698499 75271 CVE-2014-7970 URL:http://www.ubuntu.com/usn/USN-2513-1  View
698500 75271 CVE-2014-7970 UBUNTU:USN-2514-1  View
698501 75271 CVE-2014-7970 URL:http://www.ubuntu.com/usn/USN-2514-1  View
698502 75271 CVE-2014-7970 BID:70319  View
698503 75271 CVE-2014-7970 URL:http://www.securityfocus.com/bid/70319  View
698504 75271 CVE-2014-7970 SECTRACK:1030991  View
698505 75271 CVE-2014-7970 URL:http://www.securitytracker.com/id/1030991  View
698506 75271 CVE-2014-7970 SECUNIA:61142  View
698507 75271 CVE-2014-7970 URL:http://secunia.com/advisories/61142  View
698508 75271 CVE-2014-7970 SECUNIA:60174  View
698509 75271 CVE-2014-7970 URL:http://secunia.com/advisories/60174  View
698510 75271 CVE-2014-7970 XF:linux-kernel-cve20147970-dos(96921)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
15736 JVNDB-2014-004611 Drupal 用 BlueMasters テーマにおけるクロスサイトスクリプティングの脆弱性 Drupal 用 BlueMasters テーマには、テーマ設定に関する処理に不備があるため、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2014-7978 75271 3.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-004611.html  View