NVD

Id
30312  
Name
CVE-2014-1737  
Description
The raw_cmd_copyin function in drivers/block/floppy.c in the Linux kernel through 3.14.3 does not properly handle error conditions during processing of an FDRAWCMD ioctl call, which allows local users to trigger kfree operations and gain privileges by leveraging write access to a /dev/fd device.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2014-05-11  
Modified Date
2017-01-06  
Seq
2014-1737  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
160513 30312 CVE-2014-1737 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=ef87dbe7614341c2e7bfe8d32fcb7028cc97442c  View
160514 30312 CVE-2014-1737 http://linux.oracle.com/errata/ELSA-2014-0771.html  View
160515 30312 CVE-2014-1737 http://linux.oracle.com/errata/ELSA-2014-3043.html  View
160516 30312 CVE-2014-1737 SUSE-SU-2014:0667  View
160517 30312 CVE-2014-1737 SUSE-SU-2014:0683  View
160518 30312 CVE-2014-1737 DSA-2926  View
160519 30312 CVE-2014-1737 DSA-2928  View
160520 30312 CVE-2014-1737 [oss-security] 20140509 Linux kernel floppy ioctl kernel code execution  View
160521 30312 CVE-2014-1737 67300  View
160522 30312 CVE-2014-1737 1030474  View
160523 30312 CVE-2014-1737 https://bugzilla.redhat.com/show_bug.cgi?id=1094299  View
160524 30312 CVE-2014-1737 https://github.com/torvalds/linux/commit/ef87dbe7614341c2e7bfe8d32fcb7028cc97442c  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
13577 JVNDB-2014-002452 Linux Kernel の drivers/block/floppy.c の raw_cmd_copyin 関数における kfree 操作を誘発される脆弱性 Linux Kernel の drivers/block/floppy.c の raw_cmd_copyin 関数は、FDRAWCMD ioctl コールの処理中にエラー状態を適切に処理しないため、kfree 操作を誘発される、および権限を取得される脆弱性が存在します。 CVE-2014-1737 69024 CVE-2014-1737 30312 7.2 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-002452.html 2014-05-05 2014-08-06 View