CVE

Id
77071  
CVE No.
CVE-2014-9770  
Status
Candidate  
Description
tmpfiles.d/systemd.conf in systemd before 214 uses weak permissions for journal files under (1) /run/log/journal/%m and (2) /var/log/journal/%m, which allows local users to obtain sensitive information by reading these files.  
Phase
Assigned (20160408)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
707001 77071 CVE-2014-9770 MLIST:[oss-security] 20160408 CVE Request: systemd / journald created world readable journal files  View
707002 77071 CVE-2014-9770 URL:http://www.openwall.com/lists/oss-security/2016/04/08/14  View
707003 77071 CVE-2014-9770 MLIST:[oss-security] 20160408 Re: CVE Request: systemd / journald created world readable journal files  View
707004 77071 CVE-2014-9770 URL:http://www.openwall.com/lists/oss-security/2016/04/08/15  View
707005 77071 CVE-2014-9770 CONFIRM:https://bugzilla.suse.com/show_bug.cgi?id=972612  View
707006 77071 CVE-2014-9770 SUSE:openSUSE-SU-2016:1101  View
707007 77071 CVE-2014-9770 URL:http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00044.html  View
707008 77071 CVE-2014-9770 SUSE:openSUSE-SU-2016:1414  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
2747 JVNDB-2016-003520 Nexus 5 および 7 (2013) デバイス上で稼動する Android の Qualcomm コンポーネントにおける権限を取得される脆弱性 Nexus 5 および 7 (2013) デバイス上で稼動する Android の Qualcomm コンポーネントの drivers/video/msm/vidc/common/dec/vdec.c 内の vid_dec_set_h264_mv_buffers 関数は、バッファ数を検証しないため、権限を取得される脆弱性が存在します。 CVE-2014-9778 77071 9.3 7.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-003520.html  View