CVE-2014-1738

Published: May 11, 2014Modified: May 6, 2026

2.1

Vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

The raw_cmd_copyout function in drivers/block/floppy.c in the Linux kernel through 3.14.3 does not properly restrict access to certain pointers during processing of an FDRAWCMD ioctl call, which allows local users to obtain sensitive information from kernel heap memory by leveraging write access to a /dev/fd device.

Affected (12)

Products: Linux: Linux Kernel · Redhat: Enterprise Linux Eus · Debian: Debian Linux · +2 more

Show all products

Linux: Linux Kernel · Redhat: Enterprise Linux Eus · Debian: Debian Linux · Oracle: Linux · Suse: Linux Enterprise Desktop, Linux Enterprise High Availability Extension, Linux Enterprise Real Time Extension, Linux Enterprise Server

1 product

1 product

Enterprise Linux Eus

1 product

1 product

4 products

Linux Enterprise Desktop

Linux Enterprise High Availability Extension

Linux Enterprise Real Time Extension

Linux Enterprise Server

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Up to 3.14.3

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux Eus	Version 5.6
Redhat Enterprise Linux Eus	Version 6.3

Configuration C

2 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 6.0
Debian Debian Linux	Version 7.0

Configuration D

2 vulnerable

Vulnerable Software	Affected Versions
Oracle Linux	Version 5
Oracle Linux	Version 6

Configuration E

5 vulnerable

Vulnerable Software	Affected Versions
Suse Linux Enterprise Desktop	Version 11 sp3
Suse Linux Enterprise High Availability Extension	Version 11 sp3
Suse Linux Enterprise Real Time Extension	Version 11 sp3
Suse Linux Enterprise Server	Version 11 sp3
Suse Linux Enterprise Server	Version 11 sp3

Related CWEs

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (36)

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=2145e15e0557a01b9195d1c7199a1b92cb9be81f

Source: chrome-cve-admin@google.com

http://linux.oracle.com/errata/ELSA-2014-0771.html

Source: chrome-cve-admin@google.com

http://linux.oracle.com/errata/ELSA-2014-3043.html

Source: chrome-cve-admin@google.com

http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00007.html

Source: chrome-cve-admin@google.com

http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00012.html

Source: chrome-cve-admin@google.com

http://rhn.redhat.com/errata/RHSA-2014-0800.html

Source: chrome-cve-admin@google.com

http://rhn.redhat.com/errata/RHSA-2014-0801.html

Source: chrome-cve-admin@google.com

http://secunia.com/advisories/59262

Source: chrome-cve-admin@google.com

http://secunia.com/advisories/59309

Source: chrome-cve-admin@google.com

http://secunia.com/advisories/59406

Source: chrome-cve-admin@google.com

http://secunia.com/advisories/59599

Source: chrome-cve-admin@google.com

http://www.debian.org/security/2014/dsa-2926

Source: chrome-cve-admin@google.com

http://www.debian.org/security/2014/dsa-2928

Source: chrome-cve-admin@google.com

http://www.openwall.com/lists/oss-security/2014/05/09/2

Source: chrome-cve-admin@google.com

http://www.securityfocus.com/bid/67302

Source: chrome-cve-admin@google.com

http://www.securitytracker.com/id/1030474

Source: chrome-cve-admin@google.com

https://bugzilla.redhat.com/show_bug.cgi?id=1094299

Source: chrome-cve-admin@google.com

https://github.com/torvalds/linux/commit/2145e15e0557a01b9195d1c7199a1b92cb9be81f

Source: chrome-cve-admin@google.com

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=2145e15e0557a01b9195d1c7199a1b92cb9be81f

Source: af854a3a-2127-422b-91ae-364da2661108

http://linux.oracle.com/errata/ELSA-2014-0771.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://linux.oracle.com/errata/ELSA-2014-3043.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00007.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00012.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2014-0800.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2014-0801.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/59262

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/59309

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/59406

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/59599

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2014/dsa-2926

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2014/dsa-2928

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2014/05/09/2

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/67302

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id/1030474

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/show_bug.cgi?id=1094299

Source: af854a3a-2127-422b-91ae-364da2661108

https://github.com/torvalds/linux/commit/2145e15e0557a01b9195d1c7199a1b92cb9be81f

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.