NVD

Id
30537  
Name
CVE-2014-2038  
Description
The nfs_can_extend_write function in fs/nfs/write.c in the Linux kernel before 3.13.3 relies on a write delegation to extend a write operation without a certain up-to-date verification, which allows local users to obtain sensitive information from kernel memory in opportunistic circumstances by writing to a file in an NFS filesystem and then reading the same file.  
Reject
 
CVSS Version
2  
CVSS Score
3.7  
Severity
Low  
CVSS Base Score
3.7  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
1.9  
CVSS Vector
(AV:L/AC:H/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-02-28  
Modified Date
2014-03-16  
Seq
2014-2038  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
161429 30537 CVE-2014-2038 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=263b4509ec4d47e0da3e753f85a39ea12d1eff24  View
161430 30537 CVE-2014-2038 http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.13.3  View
161431 30537 CVE-2014-2038 [oss-security] 20140221 Re: Re: CVE request: Linux kernel: nfs: information leakage  View
161432 30537 CVE-2014-2038 USN-2137-1  View
161433 30537 CVE-2014-2038 USN-2140-1  View
161434 30537 CVE-2014-2038 https://bugzilla.redhat.com/show_bug.cgi?id=1066939  View
161435 30537 CVE-2014-2038 https://github.com/torvalds/linux/commit/263b4509ec4d47e0da3e753f85a39ea12d1eff24  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
12646 JVNDB-2014-001521 Linux Kernel の fs/nfs/write.c 内の nfs_can_extend_write 関数における重要な情報を取得される脆弱性 Linux Kernel の fs/nfs/write.c 内の nfs_can_extend_write 関数は、特定の最新の検証をしないで書き込み操作を拡張する書き込み委譲に依存するため、カーネルメモリから重要な情報を取得される脆弱性が存在します。 CVE-2014-2038 69325 CVE-2014-2038 30537 3.7 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-001521.html 2014-02-13 2015-08-11 View