NVD

Id
29119  
Name
CVE-2014-0205  
Description
The futex_wait function in kernel/futex.c in the Linux kernel before 2.6.37 does not properly maintain a certain reference count during requeue operations, which allows local users to cause a denial of service (use-after-free and system crash) or possibly gain privileges via a crafted application that triggers a zero count.  
Reject
 
CVSS Version
2  
CVSS Score
6.9  
Severity
Medium  
CVSS Base Score
6.9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2014-09-28  
Modified Date
2014-11-18  
Seq
2014-0205  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
154101 29119 CVE-2014-0205 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=7ada876a8703f23befbb20a7465a702ee39b1704  View
154102 29119 CVE-2014-0205 http://mirror.linux.org.au/linux/kernel/v2.6/ChangeLog-2.6.37  View
154103 29119 CVE-2014-0205 RHSA-2014:1365  View
154104 29119 CVE-2014-0205 RHSA-2014:1763  View
154105 29119 CVE-2014-0205 https://bugzilla.redhat.com/show_bug.cgi?id=1094455  View
154106 29119 CVE-2014-0205 https://github.com/torvalds/linux/commit/7ada876a8703f23befbb20a7465a702ee39b1704  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
15573 JVNDB-2014-004448 Linux Kernel の kernel/futex.c 内の futex_wait 関数におけるサービス運用妨害 (DoS) の脆弱性 Linux Kernel の kernel/futex.c 内の futex_wait 関数は、再キューイング処理中に特定の参照カウントを適切に保持しないため、サービス運用妨害 (解放済みメモリの使用およびシステムクラッシュ) 状態にされる、または権限を取得される脆弱性が存在します。 CVE-2014-0205 67606 CVE-2014-0205 29119 6.9 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-004448.html 2014-09-28 2014-11-27 View