NVD

Id
32084  
Name
CVE-2014-4027  
Description
The rd_build_device_space function in drivers/target/target_core_rd.c in the Linux kernel before 3.14 does not properly initialize a certain data structure, which allows local users to obtain sensitive information from ramdisk_mcp memory by leveraging access to a SCSI initiator.  
Reject
 
CVSS Version
2  
CVSS Score
2.3  
Severity
Low  
CVSS Base Score
2.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
4.4  
CVSS Vector
(AV:A/AC:M/Au:S/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2014-06-23  
Modified Date
2017-01-06  
Seq
2014-4027  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
168805 32084 CVE-2014-4027 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=4442dc8a92b8f9ad8ee9e7f8438f4c04c03a22dc  View
168806 32084 CVE-2014-4027 SUSE-SU-2014:1316  View
168807 32084 CVE-2014-4027 SUSE-SU-2014:1319  View
168808 32084 CVE-2014-4027 [target-devel] 20140616 [PATCH] target: Explicitly clear ramdisk_mcp backend pages  View
168809 32084 CVE-2014-4027 59134  View
168810 32084 CVE-2014-4027 [oss-security] 20140611 Re: CVE request: Linux kernel / target information leak  View
168811 32084 CVE-2014-4027 USN-2334-1  View
168812 32084 CVE-2014-4027 USN-2335-1  View
168813 32084 CVE-2014-4027 https://bugzilla.redhat.com/show_bug.cgi?id=1108744  View
168814 32084 CVE-2014-4027 https://github.com/torvalds/linux/commit/4442dc8a92b8f9ad8ee9e7f8438f4c04c03a22dc  View
168815 32084 CVE-2014-4027 https://support.f5.com/kb/en-us/solutions/public/15000/600/sol15685.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
14142 JVNDB-2014-003017 Linux kernel の drivers/target/target_core_rd.c 内の rd_build_device_space 関数における重要な情報を取得される脆弱性 Linux kernel の drivers/target/target_core_rd.c 内の rd_build_device_space 関数は、特定のデータ構造を適切に初期化しないため、ramdisk_mcp メモリから重要な情報を取得される脆弱性が存在します。 CVE-2014-4027 71315 CVE-2014-4027 32084 2.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-003017.html 2014-01-19 2014-11-26 View