NVD

Id
35119  
Name
CVE-2014-7826  
Description
kernel/trace/trace_syscalls.c in the Linux kernel through 3.17.2 does not properly handle private syscall numbers during use of the ftrace subsystem, which allows local users to gain privileges or cause a denial of service (invalid pointer dereference) via a crafted application.  
Reject
 
CVSS Version
2  
CVSS Score
4.6  
Severity
Medium  
CVSS Base Score
4.6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-11-10  
Modified Date
2017-01-06  
Seq
2014-7826  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
179751 35119 CVE-2014-7826 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=086ba77a6db00ed858ff07451bedee197df868c9  View
179752 35119 CVE-2014-7826 SUSE-SU-2015:0481  View
179753 35119 CVE-2014-7826 openSUSE-SU-2015:0566  View
179754 35119 CVE-2014-7826 RHSA-2014:1943  View
179755 35119 CVE-2014-7826 RHSA-2015:0290  View
179756 35119 CVE-2014-7826 [oss-security] 20141106 Exploitable issues in Linux perf/ftrace subsystems  View
179757 35119 CVE-2014-7826 70971  View
179758 35119 CVE-2014-7826 linux-kernel-cve20147826-dos(98556)  View
179759 35119 CVE-2014-7826 https://bugzilla.redhat.com/show_bug.cgi?id=1161565  View
179760 35119 CVE-2014-7826 https://github.com/torvalds/linux/commit/086ba77a6db00ed858ff07451bedee197df868c9  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
16451 JVNDB-2014-005326 Linux Kernel の kernel/trace/trace_syscalls.c における権限を取得される脆弱性 Linux Kernel の kernel/trace/trace_syscalls.c は、ftrace サブシステムの使用中にプライベートなシステムコール番号を適切に処理しないため、権限を取得される、またはサービス運用妨害 (無効なポインタデリファレンス) 状態にされる脆弱性が存在します。 CVE-2014-7826 75119 CVE-2014-7826 35119 4.6 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-005326.html 2014-10-31 2015-05-12 View