NVD

Id
32865  
Name
CVE-2014-5045  
Description
The mountpoint_last function in fs/namei.c in the Linux kernel before 3.15.8 does not properly maintain a certain reference count during attempts to use the umount system call in conjunction with a symlink, which allows local users to cause a denial of service (memory consumption or use-after-free) or possibly have unspecified other impact via the umount program.  
Reject
 
CVSS Version
2  
CVSS Score
6.2  
Severity
Medium  
CVSS Base Score
6.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
1.9  
CVSS Vector
(AV:L/AC:H/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2014-08-01  
Modified Date
2017-01-06  
Seq
2014-5045  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
172610 32865 CVE-2014-5045 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=295dc39d941dc2ae53d5c170365af4c9d5c16212  View
172611 32865 CVE-2014-5045 RHSA-2015:0062  View
172612 32865 CVE-2014-5045 60353  View
172613 32865 CVE-2014-5045 http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.15.8  View
172614 32865 CVE-2014-5045 [oss-security] 20140723 Re: CVE request: kernel: vfs: refcount issues during unmount on symlink  View
172615 32865 CVE-2014-5045 68862  View
172616 32865 CVE-2014-5045 https://bugzilla.redhat.com/show_bug.cgi?id=1122472  View
172617 32865 CVE-2014-5045 https://github.com/torvalds/linux/commit/295dc39d941dc2ae53d5c170365af4c9d5c16212  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
14791 JVNDB-2014-003666 Linux Kernel の fs/namei.c 内の mountpoint_last 関数におけるサービス運用妨害 (DoS) の脆弱性 Linux Kernel の fs/namei.c 内の mountpoint_last 関数は、シンボリックリンクと関連する umount システムコールの使用を試みる間、特定の参照カウントを適切に保持できないため、サービス運用妨害 (メモリ消費または use-after-free) 状態にされるなど、不特定の影響を受ける脆弱性が存在します。 CVE-2014-5045 72334 CVE-2014-5045 32865 6.2 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-003666.html 2014-07-31 2015-06-08 View