NVD

Id
29011  
Name
CVE-2014-0069  
Description
The cifs_iovec_write function in fs/cifs/file.c in the Linux kernel through 3.13.5 does not properly handle uncached write operations that copy fewer than the requested number of bytes, which allows local users to obtain sensitive information from kernel memory, cause a denial of service (memory corruption and system crash), or possibly gain privileges via a writev system call with a crafted pointer.  
Reject
 
CVSS Version
2  
CVSS Score
6.2  
Severity
Medium  
CVSS Base Score
6.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
1.9  
CVSS Vector
(AV:L/AC:H/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2014-02-28  
Modified Date
2014-07-17  
Seq
2014-0069  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
153041 29011 CVE-2014-0069 [linux-cifs] 20140214 [PATCH] cifs: ensure that uncached writes handle unmapped areas correctly  View
153042 29011 CVE-2014-0069 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=5d81de8e8667da7135d3a32a964087c0faf5483f  View
153043 29011 CVE-2014-0069 RHSA-2014:0328  View
153044 29011 CVE-2014-0069 [oss-security] 20140217 CVE-2014-0069 -- kernel: cifs: incorrect handling of bogus user pointers during uncached writes  View
153045 29011 CVE-2014-0069 65588  View
153046 29011 CVE-2014-0069 https://bugzilla.redhat.com/show_bug.cgi?id=1064253  View
153047 29011 CVE-2014-0069 https://github.com/torvalds/linux/commit/5d81de8e8667da7135d3a32a964087c0faf5483f  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
12643 JVNDB-2014-001518 Linux Kernel の fs/cifs/file.c 内の cifs_iovec_write 関数における重要な情報を取得される脆弱性 Linux Kernel の fs/cifs/file.c 内の cifs_iovec_write 関数は、要求されたバイト数よりも少なくコピーされた、キャッシュされない書き込み操作を適切に処理しないため、カーネルメモリから重要な情報を取得される、サービス運用妨害 (メモリ破損およびシステムクラッシュ) 状態にされる、または権限を取得される脆弱性が存在します。 CVE-2014-0069 67470 CVE-2014-0069 29011 6.2 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-001518.html 2014-02-14 2014-04-08 View