NVD

Id
31424  
Name
CVE-2014-3182  
Description
Array index error in the logi_dj_raw_event function in drivers/hid/hid-logitech-dj.c in the Linux kernel before 3.16.2 allows physically proximate attackers to execute arbitrary code or cause a denial of service (invalid kfree) via a crafted device that provides a malformed REPORT_TYPE_NOTIF_DEVICE_UNPAIRED value.  
Reject
 
CVSS Version
2  
CVSS Score
6.9  
Severity
Medium  
CVSS Base Score
6.9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2014-09-28  
Modified Date
2015-10-08  
Seq
2014-3182  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
164679 31424 CVE-2014-3182 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=ad3e14d7c5268c2e24477c6ef54bbdf88add5d36  View
164680 31424 CVE-2014-3182 RHSA-2014:1318  View
164681 31424 CVE-2014-3182 http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.16.2  View
164682 31424 CVE-2014-3182 [oss-security] 20140911 Multiple Linux USB driver CVE assignment  View
164683 31424 CVE-2014-3182 69770  View
164684 31424 CVE-2014-3182 https://bugzilla.redhat.com/show_bug.cgi?id=1141210  View
164685 31424 CVE-2014-3182 https://code.google.com/p/google-security-research/issues/detail?id=89  View
164686 31424 CVE-2014-3182 https://github.com/torvalds/linux/commit/ad3e14d7c5268c2e24477c6ef54bbdf88add5d36  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
15563 JVNDB-2014-004438 Linux Kernel の drivers/hid/hid-logitech-dj.c の logi_dj_raw_event 関数における任意のコードを実行される脆弱性 Linux Kernel の drivers/hid/hid-logitech-dj.c の logi_dj_raw_event 関数には、配列のインデックスエラーにより、任意のコードを実行される、またはサービス運用妨害 (不正な kfree 処理) 状態にされる脆弱性が存在します。 CVE-2014-3182 70469 CVE-2014-3182 31424 6.9 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-004438.html 2014-09-05 2014-11-21 View