NVD

Id
30313  
Name
CVE-2014-1738  
Description
The raw_cmd_copyout function in drivers/block/floppy.c in the Linux kernel through 3.14.3 does not properly restrict access to certain pointers during processing of an FDRAWCMD ioctl call, which allows local users to obtain sensitive information from kernel heap memory by leveraging write access to a /dev/fd device.  
Reject
 
CVSS Version
2  
CVSS Score
4.9  
Severity
Medium  
CVSS Base Score
4.9  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:N/A:N)  
Pub Date
2017-01-19  
Published
2014-05-11  
Modified Date
2017-01-06  
Seq
2014-1738  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
160525 30313 CVE-2014-1738 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=2145e15e0557a01b9195d1c7199a1b92cb9be81f  View
160526 30313 CVE-2014-1738 http://linux.oracle.com/errata/ELSA-2014-0771.html  View
160527 30313 CVE-2014-1738 http://linux.oracle.com/errata/ELSA-2014-3043.html  View
160528 30313 CVE-2014-1738 SUSE-SU-2014:0667  View
160529 30313 CVE-2014-1738 SUSE-SU-2014:0683  View
160530 30313 CVE-2014-1738 DSA-2926  View
160531 30313 CVE-2014-1738 DSA-2928  View
160532 30313 CVE-2014-1738 [oss-security] 20140509 Linux kernel floppy ioctl kernel code execution  View
160533 30313 CVE-2014-1738 67302  View
160534 30313 CVE-2014-1738 1030474  View
160535 30313 CVE-2014-1738 https://bugzilla.redhat.com/show_bug.cgi?id=1094299  View
160536 30313 CVE-2014-1738 https://github.com/torvalds/linux/commit/2145e15e0557a01b9195d1c7199a1b92cb9be81f  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
13578 JVNDB-2014-002453 Linux Kernel の drivers/block/floppy.c の raw_cmd_copyout 関数における重要な情報を取得される脆弱性 Linux Kernel の drivers/block/floppy.c の raw_cmd_copyout 関数は、FDRAWCMD ioctl コールの処理中に特定のポインタへのアクセスを適切に制限しないため、カーネルヒープメモリから重要な情報を取得される脆弱性が存在します。 CVE-2014-1738 69025 CVE-2014-1738 30313 4.9 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-002453.html 2014-05-05 2014-08-06 View