NVD

Id
36236  
Name
CVE-2014-9584  
Description
The parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the Linux kernel before 3.18.2 does not validate a length value in the Extensions Reference (ER) System Use Field, which allows local users to obtain sensitive information from kernel memory via a crafted iso9660 image.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2015-01-09  
Modified Date
2017-01-02  
Seq
2014-9584  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
185105 36236 CVE-2014-9584 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=4e2024624e678f0ebb916e6192bd23c1f9fdf696  View
185106 36236 CVE-2014-9584 SUSE-SU-2015:0481  View
185107 36236 CVE-2014-9584 SUSE-SU-2015:0529  View
185108 36236 CVE-2014-9584 openSUSE-SU-2015:0566  View
185109 36236 CVE-2014-9584 SUSE-SU-2015:0652  View
185110 36236 CVE-2014-9584 openSUSE-SU-2015:0714  View
185111 36236 CVE-2014-9584 SUSE-SU-2015:0736  View
185112 36236 CVE-2014-9584 SUSE-SU-2015:0812  View
185113 36236 CVE-2014-9584 DSA-3128  View
185114 36236 CVE-2014-9584 http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.18.2  View
185115 36236 CVE-2014-9584 MDVSA-2015:058  View
185116 36236 CVE-2014-9584 [oss-security] 20150109 Re: CVE request Linux kernel: isofs: unchecked printing of ER records  View
185117 36236 CVE-2014-9584 http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html  View
185118 36236 CVE-2014-9584 71883  View
185119 36236 CVE-2014-9584 USN-2511-1  View
185120 36236 CVE-2014-9584 USN-2512-1  View
185121 36236 CVE-2014-9584 USN-2513-1  View
185122 36236 CVE-2014-9584 USN-2514-1  View
185123 36236 CVE-2014-9584 USN-2515-1  View
185124 36236 CVE-2014-9584 USN-2516-1  View
185125 36236 CVE-2014-9584 USN-2517-1  View
185126 36236 CVE-2014-9584 USN-2518-1  View
185127 36236 CVE-2014-9584 https://bugzilla.redhat.com/show_bug.cgi?id=1180119  View
185128 36236 CVE-2014-9584 https://github.com/torvalds/linux/commit/4e2024624e678f0ebb916e6192bd23c1f9fdf696  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
18707 JVNDB-2014-007582 Linux Kernel の fs/isofs/rock.c におけるカーネルメモリから重要な情報を取得される脆弱性 Linux Kernel の fs/isofs/rock.c 内の parse_rock_ridge_inode_internal 関数は、Extensions Reference (ER) System Use Field 内の length 値を検証しないため、カーネルメモリから重要な情報を取得される脆弱性が存在します。 CVE-2014-9584 76877 CVE-2014-9584 36236 2.1 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007582.html 2014-12-19 2015-01-15 View