NVD

Id
36212  
Name
CVE-2014-9529  
Description
Race condition in the key_gc_unused_keys function in security/keys/gc.c in the Linux kernel through 3.18.2 allows local users to cause a denial of service (memory corruption or panic) or possibly have unspecified other impact via keyctl commands that trigger access to a key structure member during garbage collection of a key.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2015-01-09  
Modified Date
2017-01-02  
Seq
2014-9529  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
185003 36212 CVE-2014-9529 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=a3a8784454692dd72e5d5d34dcdab17b4420e74c  View
185004 36212 CVE-2014-9529 FEDORA-2015-0517  View
185005 36212 CVE-2014-9529 FEDORA-2015-0515  View
185006 36212 CVE-2014-9529 openSUSE-SU-2015:0714  View
185007 36212 CVE-2014-9529 DSA-3128  View
185008 36212 CVE-2014-9529 MDVSA-2015:058  View
185009 36212 CVE-2014-9529 [oss-security] 20150106 CVE-2014-9529 - Linux kernel security/keys/gc.c race condition  View
185010 36212 CVE-2014-9529 71880  View
185011 36212 CVE-2014-9529 USN-2511-1  View
185012 36212 CVE-2014-9529 USN-2512-1  View
185013 36212 CVE-2014-9529 USN-2513-1  View
185014 36212 CVE-2014-9529 USN-2514-1  View
185015 36212 CVE-2014-9529 USN-2515-1  View
185016 36212 CVE-2014-9529 USN-2516-1  View
185017 36212 CVE-2014-9529 USN-2517-1  View
185018 36212 CVE-2014-9529 USN-2518-1  View
185019 36212 CVE-2014-9529 linux-kernel-cve20149529-dos(99641)  View
185020 36212 CVE-2014-9529 https://bugzilla.redhat.com/show_bug.cgi?id=1179813  View
185021 36212 CVE-2014-9529 https://github.com/torvalds/linux/commit/a3a8784454692dd72e5d5d34dcdab17b4420e74c  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
18706 JVNDB-2014-007581 Linux Kernel の security/keys/gc.c の key_gc_unused_keys 関数におけるサービス運用妨害 (DoS) の脆弱性 Linux Kernel の security/keys/gc.c 内の key_gc_unused_keys 関数には、競合状態により、サービス運用妨害 (メモリ破損またはパニック) 状態にされるなど、不特定の影響を受ける脆弱性が存在します。 CVE-2014-9529 76822 CVE-2014-9529 36212 7.2 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007581.html 2014-12-29 2015-01-15 View