NVD

Id
35366  
Name
CVE-2014-8159  
Description
The InfiniBand (IB) implementation in the Linux kernel package before 2.6.32-504.12.2 on Red Hat Enterprise Linux (RHEL) 6 does not properly restrict use of User Verbs for registration of memory regions, which allows local users to access arbitrary physical memory locations, and consequently cause a denial of service (system crash) or gain privileges, by leveraging permissions on a uverbs device under /dev/infiniband/.  
Reject
 
CVSS Version
2  
CVSS Score
6.9  
Severity
Medium  
CVSS Base Score
6.9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2015-03-16  
Modified Date
2017-01-02  
Seq
2014-8159  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
181270 35366 CVE-2014-8159 http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705  View
181271 35366 CVE-2014-8159 FEDORA-2015-4066  View
181272 35366 CVE-2014-8159 SUSE-SU-2015:1478  View
181273 35366 CVE-2014-8159 SUSE-SU-2015:1487  View
181274 35366 CVE-2014-8159 SUSE-SU-2015:1488  View
181275 35366 CVE-2014-8159 SUSE-SU-2015:1489  View
181276 35366 CVE-2014-8159 SUSE-SU-2015:1491  View
181277 35366 CVE-2014-8159 RHSA-2015:0674  View
181278 35366 CVE-2014-8159 RHSA-2015:0695  View
181279 35366 CVE-2014-8159 RHSA-2015:0726  View
181280 35366 CVE-2014-8159 RHSA-2015:0751  View
181281 35366 CVE-2014-8159 RHSA-2015:0782  View
181282 35366 CVE-2014-8159 RHSA-2015:0783  View
181283 35366 CVE-2014-8159 RHSA-2015:0803  View
181284 35366 CVE-2014-8159 RHSA-2015:0870  View
181285 35366 CVE-2014-8159 RHSA-2015:0919  View
181286 35366 CVE-2014-8159 DSA-3237  View
181287 35366 CVE-2014-8159 73060  View
181288 35366 CVE-2014-8159 1032224  View
181289 35366 CVE-2014-8159 USN-2525-1  View
181290 35366 CVE-2014-8159 USN-2526-1  View
181291 35366 CVE-2014-8159 USN-2527-1  View
181292 35366 CVE-2014-8159 USN-2528-1  View
181293 35366 CVE-2014-8159 USN-2529-1  View
181294 35366 CVE-2014-8159 USN-2530-1  View
181295 35366 CVE-2014-8159 USN-2561-1  View
181296 35366 CVE-2014-8159 https://bugzilla.redhat.com/show_bug.cgi?id=1181166  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
19110 JVNDB-2014-007985 Red Hat Enterprise Linux 上で稼動する Linux Kernel パッケージの InfiniBand の実装における物理メモリロケーションにアクセスされる脆弱性 Red Hat Enterprise Linux (RHEL) 上で稼動する Linux Kernel パッケージの InfiniBand (IB) の実装は、メモリ領域登録用の User Verbs の使用を適切に制限しないため、任意の物理メモリロケーションにアクセスされ、その結果、サービス運用妨害 (システムクラッシュ) 状態にされる、または権限を取得される脆弱性が存在します。 CVE-2014-8159 75452 CVE-2014-8159 35366 6.9 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007985.html 2014-10-10 2015-06-08 View