CVE-2014-1874

Published: Feb 28, 2014Modified: Apr 29, 2026

4.9

Vector

AV:L/AC:L/Au:N/C:N/I:N/A:C

Exploitability: 3.9 / Impact: 6.9

Source: NVD

Description

The security_context_to_sid_core function in security/selinux/ss/services.c in the Linux kernel before 3.13.4 allows local users to cause a denial of service (system crash) by leveraging the CAP_MAC_ADMIN capability to set a zero-length security context.

Affected (6)

Products: Linux: Linux Kernel · Suse: Linux Enterprise Server · Canonical: Ubuntu Linux

Linux

1 product

Linux Kernel

Suse

1 product

Linux Enterprise Server

Canonical

1 product

Ubuntu Linux

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Before 3.13.4

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Suse Linux Enterprise Server	Version 10 sp4

Configuration C

4 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 10.04
Canonical Ubuntu Linux	Version 12.04
Canonical Ubuntu Linux	Version 12.10
Canonical Ubuntu Linux	Version 13.10

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (46)

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=2172fa709ab32ca60e86179dc67d0857be8e2c98

Source: secalert@redhat.com

http://linux.oracle.com/errata/ELSA-2014-0771.html

Source: secalert@redhat.com

Third Party Advisory

http://linux.oracle.com/errata/ELSA-2014-3043.html

Source: secalert@redhat.com

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://secunia.com/advisories/59262

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/59309

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/59406

Source: secalert@redhat.com

Third Party Advisory

http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.13.4

Source: secalert@redhat.com

Release NotesVendor Advisory

http://www.openwall.com/lists/oss-security/2014/02/07/2

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://www.securityfocus.com/bid/65459

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.ubuntu.com/usn/USN-2128-1

Source: secalert@redhat.com

Third Party Advisory

http://www.ubuntu.com/usn/USN-2129-1

Source: secalert@redhat.com

Third Party Advisory

http://www.ubuntu.com/usn/USN-2133-1

Source: secalert@redhat.com

Third Party Advisory

http://www.ubuntu.com/usn/USN-2134-1

Source: secalert@redhat.com

Third Party Advisory

http://www.ubuntu.com/usn/USN-2135-1

Source: secalert@redhat.com

Third Party Advisory

http://www.ubuntu.com/usn/USN-2136-1

Source: secalert@redhat.com

Third Party Advisory

http://www.ubuntu.com/usn/USN-2137-1

Source: secalert@redhat.com

Third Party Advisory

http://www.ubuntu.com/usn/USN-2138-1

Source: secalert@redhat.com

Third Party Advisory

http://www.ubuntu.com/usn/USN-2139-1

Source: secalert@redhat.com

Third Party Advisory

http://www.ubuntu.com/usn/USN-2140-1

Source: secalert@redhat.com

Third Party Advisory

http://www.ubuntu.com/usn/USN-2141-1

Source: secalert@redhat.com

Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=1062356

Source: secalert@redhat.com

Issue TrackingThird Party Advisory

https://github.com/torvalds/linux/commit/2172fa709ab32ca60e86179dc67d0857be8e2c98

Source: secalert@redhat.com

PatchThird Party Advisory

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=2172fa709ab32ca60e86179dc67d0857be8e2c98