NVD

Id
31428  
Name
CVE-2014-3186  
Description
Buffer overflow in the picolcd_raw_event function in devices/hid/hid-picolcd_core.c in the PicoLCD HID device driver in the Linux kernel through 3.16.3, as used in Android on Nexus 7 devices, allows physically proximate attackers to cause a denial of service (system crash) or possibly execute arbitrary code via a crafted device that sends a large report.  
Reject
 
CVSS Version
2  
CVSS Score
6.9  
Severity
Medium  
CVSS Base Score
6.9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2014-09-28  
Modified Date
2015-05-13  
Seq
2014-3186  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
164731 31428 CVE-2014-3186 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=844817e47eef14141cf59b8d5ac08dd11c0a9189  View
164732 31428 CVE-2014-3186 SUSE-SU-2015:0481  View
164733 31428 CVE-2014-3186 openSUSE-SU-2015:0566  View
164734 31428 CVE-2014-3186 [oss-security] 20140911 Re: Multiple Linux USB driver CVE assignment  View
164735 31428 CVE-2014-3186 69763  View
164736 31428 CVE-2014-3186 USN-2376-1  View
164737 31428 CVE-2014-3186 USN-2377-1  View
164738 31428 CVE-2014-3186 USN-2378-1  View
164739 31428 CVE-2014-3186 USN-2379-1  View
164740 31428 CVE-2014-3186 https://bugzilla.redhat.com/show_bug.cgi?id=1141407  View
164741 31428 CVE-2014-3186 https://code.google.com/p/google-security-research/issues/detail?id=101  View
164742 31428 CVE-2014-3186 https://github.com/torvalds/linux/commit/844817e47eef14141cf59b8d5ac08dd11c0a9189  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
15561 JVNDB-2014-004436 Nexus 7 デバイス上の Android で使用される Linux Kernel の PicoLCD HID デバイスドライバにおけるバッファオーバーフローの脆弱性 Nexus 7 デバイス上の Android で使用される Linux Kernel の PicoLCD HID デバイスドライバの devices/hid/hid-picolcd_core.c 内の picolcd_raw_event 関数には、バッファオーバーフローの脆弱性が存在します。 CVE-2014-3186 70473 CVE-2014-3186 31428 6.9 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-004436.html 2014-08-25 2014-09-30 View