NVD

Id
35115  
Name
CVE-2014-7822  
Description
The implementation of certain splice_write file operations in the Linux kernel before 3.16 does not enforce a restriction on the maximum size of a single file, which allows local users to cause a denial of service (system crash) or possibly have unspecified other impact via a crafted splice system call, as demonstrated by use of a file descriptor associated with an ext4 filesystem.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2015-03-16  
Modified Date
2017-01-02  
Seq
2014-7822  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
179710 35115 CVE-2014-7822 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=8d0207652cbe27d1f962050737848e5ad4671958  View
179711 35115 CVE-2014-7822 SUSE-SU-2015:0529  View
179712 35115 CVE-2014-7822 openSUSE-SU-2015:0714  View
179713 35115 CVE-2014-7822 SUSE-SU-2015:0736  View
179714 35115 CVE-2014-7822 SUSE-SU-2015:1488  View
179715 35115 CVE-2014-7822 SUSE-SU-2015:1489  View
179716 35115 CVE-2014-7822 RHSA-2015:0102  View
179717 35115 CVE-2014-7822 RHSA-2015:0164  View
179718 35115 CVE-2014-7822 RHSA-2015:0674  View
179719 35115 CVE-2014-7822 RHSA-2015:0694  View
179720 35115 CVE-2014-7822 DSA-3170  View
179721 35115 CVE-2014-7822 http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html  View
179722 35115 CVE-2014-7822 72347  View
179723 35115 CVE-2014-7822 USN-2541-1  View
179724 35115 CVE-2014-7822 USN-2542-1  View
179725 35115 CVE-2014-7822 USN-2543-1  View
179726 35115 CVE-2014-7822 USN-2544-1  View
179727 35115 CVE-2014-7822 https://bugzilla.redhat.com/show_bug.cgi?id=1163792  View
179728 35115 CVE-2014-7822 https://github.com/torvalds/linux/commit/8d0207652cbe27d1f962050737848e5ad4671958  View
179729 35115 CVE-2014-7822 36743  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
19111 JVNDB-2014-007986 Linux Kernel の特定の splice_write ファイル操作の実装におけるサービス運用妨害 (DoS) の脆弱性 Linux Kernel の特定の splice_write ファイル操作の実装は、単一ファイルの最大サイズの制限を適用しないため、サービス運用妨害 (システムクラッシュ) 状態にされるなど、不特定の影響を受ける脆弱性が存在します。 CVE-2014-7822 75115 CVE-2014-7822 35115 7.2 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007986.html 2014-06-12 2015-06-02 View