CVE-2014-1739

Published: Jun 23, 2014Modified: May 6, 2026

2.1

Vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

The media_device_enum_entities function in drivers/media/media-device.c in the Linux kernel before 3.14.6 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel memory by leveraging /dev/media0 read access for a MEDIA_IOC_ENUM_ENTITIES ioctl call.

Affected (7)

Products: Linux: Linux Kernel · Canonical: Ubuntu Linux · Suse: Linux Enterprise High Availability Extension, Suse Linux Enterprise Desktop, Suse Linux Enterprise Server

1 product

1 product

3 products

Linux Enterprise High Availability Extension

Suse Linux Enterprise Desktop

Suse Linux Enterprise Server

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Before 3.14.6

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 12.04
Canonical Ubuntu Linux	Version 13.10

Configuration C

4 vulnerable

Vulnerable Software	Affected Versions
Suse Linux Enterprise High Availability Extension	Version 11 sp3
Suse Suse Linux Enterprise Desktop	Version 11 sp3
Suse Suse Linux Enterprise Server	Version 11 sp3
Suse Suse Linux Enterprise Server	Version 11 sp3

Related CWEs

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (32)

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e6a623460e5fc960ac3ee9f946d3106233fd28d8

Source: chrome-cve-admin@google.com

http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00006.html

Source: chrome-cve-admin@google.com

http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00007.html

Source: chrome-cve-admin@google.com

http://secunia.com/advisories/59597

Source: chrome-cve-admin@google.com

http://speirofr.appspot.com/cve-2014-1739-kernel-infoleak-vulnerability-in-media_enum_entities.html

Source: chrome-cve-admin@google.com

http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.6

Source: chrome-cve-admin@google.com

http://www.openwall.com/lists/oss-security/2014/06/15/1

Source: chrome-cve-admin@google.com

http://www.securityfocus.com/bid/68048

Source: chrome-cve-admin@google.com

http://www.securitytracker.com/id/1038201

Source: chrome-cve-admin@google.com

http://www.ubuntu.com/usn/USN-2259-1

Source: chrome-cve-admin@google.com

http://www.ubuntu.com/usn/USN-2261-1

Source: chrome-cve-admin@google.com

http://www.ubuntu.com/usn/USN-2263-1

Source: chrome-cve-admin@google.com

http://www.ubuntu.com/usn/USN-2264-1

Source: chrome-cve-admin@google.com

https://bugzilla.redhat.com/show_bug.cgi?id=1109774

Source: chrome-cve-admin@google.com

https://github.com/torvalds/linux/commit/e6a623460e5fc960ac3ee9f946d3106233fd28d8

Source: chrome-cve-admin@google.com

https://source.android.com/security/bulletin/2017-04-01

Source: chrome-cve-admin@google.com

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e6a623460e5fc960ac3ee9f946d3106233fd28d8

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00006.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00007.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/59597

Source: af854a3a-2127-422b-91ae-364da2661108

http://speirofr.appspot.com/cve-2014-1739-kernel-infoleak-vulnerability-in-media_enum_entities.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.6

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2014/06/15/1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/68048

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id/1038201

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-2259-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-2261-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-2263-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-2264-1

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/show_bug.cgi?id=1109774

Source: af854a3a-2127-422b-91ae-364da2661108

https://github.com/torvalds/linux/commit/e6a623460e5fc960ac3ee9f946d3106233fd28d8

Source: af854a3a-2127-422b-91ae-364da2661108

https://source.android.com/security/bulletin/2017-04-01

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.