NVD

Id
32490  
Name
CVE-2014-4508  
Description
arch/x86/kernel/entry_32.S in the Linux kernel through 3.15.1 on 32-bit x86 platforms, when syscall auditing is enabled and the sep CPU feature flag is set, allows local users to cause a denial of service (OOPS and system crash) via an invalid syscall number, as demonstrated by number 1000.  
Reject
 
CVSS Version
2  
CVSS Score
4.7  
Severity
Medium  
CVSS Base Score
4.7  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-19  
Published
2014-06-23  
Modified Date
2017-01-06  
Seq
2014-4508  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
171420 32490 CVE-2014-4508 [linux-kernel] 20140616 Re: 3.15: kernel BUG at kernel/auditsc.c:1525!  View
171421 32490 CVE-2014-4508 SUSE-SU-2014:1316  View
171422 32490 CVE-2014-4508 SUSE-SU-2014:1319  View
171423 32490 CVE-2014-4508 openSUSE-SU-2015:0566  View
171424 32490 CVE-2014-4508 [oss-security] 20140619 CVE request: Another Linux syscall auditing bug  View
171425 32490 CVE-2014-4508 [oss-security] 20140620 Re: CVE request: Another Linux syscall auditing bug  View
171426 32490 CVE-2014-4508 68126  View
171427 32490 CVE-2014-4508 USN-2334-1  View
171428 32490 CVE-2014-4508 https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.61  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
14145 JVNDB-2014-003020 32-bit x86 プラットフォーム上で稼動する Linux kernel の arch/x86/kernel/entry_32.S におけるサービス運用妨害 (DoS) の脆弱性 32-bit x86 プラットフォーム上で稼動する Linux kernel の arch/x86/kernel/entry_32.S には、システムコール監査が有効であり、かつ sep CPU 機能フラグが設定されている場合、サービス運用妨害 (OOPS およびシステムクラッシュ) 状態にされる脆弱性が存在します。 CVE-2014-4508 71796 CVE-2014-4508 32490 4.7 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-003020.html 2014-06-16 2014-08-06 View