NVD

Id
36298  
Name
CVE-2014-9683  
Description
Off-by-one error in the ecryptfs_decode_from_filename function in fs/ecryptfs/crypto.c in the eCryptfs subsystem in the Linux kernel before 3.18.2 allows local users to cause a denial of service (buffer overflow and system crash) or possibly gain privileges via a crafted filename.  
Reject
 
CVSS Version
2  
CVSS Score
3.6  
Severity
Low  
CVSS Base Score
3.6  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:P/A:P)  
Pub Date
2017-01-19  
Published
2015-03-03  
Modified Date
2016-12-23  
Seq
2014-9683  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
185606 36298 CVE-2014-9683 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=942080643bce061c3dd9d5718d3b745dcb39a8bc  View
185607 36298 CVE-2014-9683 SUSE-SU-2015:1478  View
185608 36298 CVE-2014-9683 RHSA-2015:1272  View
185609 36298 CVE-2014-9683 DSA-3170  View
185610 36298 CVE-2014-9683 http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.18.2  View
185611 36298 CVE-2014-9683 MDVSA-2015:058  View
185612 36298 CVE-2014-9683 [oss-security] 20150217 Re: CVE request: Linux kernel ecryptfs 1-byte overwrite  View
185613 36298 CVE-2014-9683 http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html  View
185614 36298 CVE-2014-9683 72643  View
185615 36298 CVE-2014-9683 1031860  View
185616 36298 CVE-2014-9683 USN-2515-1  View
185617 36298 CVE-2014-9683 USN-2516-1  View
185618 36298 CVE-2014-9683 USN-2517-1  View
185619 36298 CVE-2014-9683 USN-2518-1  View
185620 36298 CVE-2014-9683 USN-2541-1  View
185621 36298 CVE-2014-9683 USN-2542-1  View
185622 36298 CVE-2014-9683 https://bugzilla.redhat.com/show_bug.cgi?id=1193830  View
185623 36298 CVE-2014-9683 https://github.com/torvalds/linux/commit/942080643bce061c3dd9d5718d3b745dcb39a8bc  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
19076 JVNDB-2014-007951 Linux Kernel の eCryptfs サブシステムにおけるサービス運用妨害 (DoS) の脆弱性 Linux Kernel の eCryptfs サブシステムの fs/ecryptfs/crypto.c 内の ecryptfs_decode_from_filename 関数には、一つずれエラー (Off-by-One error) により、サービス運用妨害 (バッファオーバーフローおよびシステムクラッシュ) 状態にされる、または権限を取得される脆弱性が存在します。 CVE-2014-9683 76976 CVE-2014-9683 36298 3.6 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007951.html 2014-11-26 2015-03-04 View