← Back

CVE-2014-4027

nvd nist
Published: Jun 23, 2014Modified: May 6, 2026

JSON object

Loading...
2.3
Vector
AV:A/AC:M/Au:S/C:P/I:N/A:N
Exploitability: 4.4 / Impact: 2.9
Source: NVD

Description

The rd_build_device_space function in drivers/target/target_core_rd.c in the Linux kernel before 3.14 does not properly initialize a certain data structure, which allows local users to obtain sensitive information from ramdisk_mcp memory by leveraging access to a SCSI initiator.

Affected (35)

Show all products
Linux: Linux Kernel · Redhat: Enterprise Linux · Canonical: Ubuntu Linux · Suse: Linux Enterprise Desktop, Linux Enterprise High Availability Extension, Linux Enterprise Real Time Extension, Linux Enterprise Server · F5: Big Ip Access Policy Manager, Big Ip Advanced Firewall Manager, Big Ip Analytics, Big Ip Application Acceleration Manager, Big Ip Application Security Manager, Big Ip Domain Name System, Big Ip Edge Gateway, Big Ip Global Traffic Manager, Big Ip Link Controller, Big Ip Local Traffic Manager, Big Ip Policy Enforcement Manager, Big Ip Protocol Security Module, Big Ip Wan Optimization Manager, Big Ip Webaccelerator, Big Iq Application Delivery Controller, Big Iq Cloud, Big Iq Device, Big Iq Security, Enterprise Manager
Linux
1 product
Linux Kernel
Redhat
1 product
Enterprise Linux
Canonical
1 product
Ubuntu Linux
Suse
4 products
Linux Enterprise Desktop
Linux Enterprise High Availability Extension
Linux Enterprise Real Time Extension
Linux Enterprise Server
F5
19 products
Big Ip Access Policy Manager
Big Ip Advanced Firewall Manager
Big Ip Analytics
Big Ip Application Acceleration Manager
Big Ip Application Security Manager
Big Ip Domain Name System
Big Ip Edge Gateway
Big Ip Global Traffic Manager
Big Ip Link Controller
Big Ip Local Traffic Manager
Big Ip Policy Enforcement Manager
Big Ip Protocol Security Module
Big Ip Wan Optimization Manager
Big Ip Webaccelerator
Big Iq Application Delivery Controller
Big Iq Cloud
Big Iq Device
Big Iq Security
Enterprise Manager
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Linux Kernel
Before 3.14
Configuration B
1 vulnerable
Vulnerable SoftwareAffected Versions
Enterprise Linux
Version 6.0
Configuration C
1 vulnerable
Vulnerable SoftwareAffected Versions
Ubuntu Linux
Version 12.04
Configuration D
5 vulnerable
Vulnerable SoftwareAffected Versions
Linux Enterprise Desktop
Version 11 sp3
Linux Enterprise High Availability Extension
Version 11 sp3
Linux Enterprise Real Time Extension
Version 11 sp3
Suse
Linux Enterprise Server
Version 11 sp3
Linux Enterprise Server
Version 11 sp3
Configuration E
27 vulnerable
Vulnerable SoftwareAffected Versions
F5
Big Ip Access Policy Manager
From 11.1.0 to 11.6.0
Big Ip Access Policy Manager
Version 12.0.0
F5
Big Ip Advanced Firewall Manager
From 11.3.0 to 11.6.0
Big Ip Advanced Firewall Manager
Version 12.0.0
F5
Big Ip Analytics
From 11.1.0 to 11.6.0
Big Ip Analytics
Version 12.0.0
F5
Big Ip Application Acceleration Manager
From 11.4.0 to 11.6.0
Big Ip Application Acceleration Manager
Version 12.0.0
F5
Big Ip Application Security Manager
From 11.1.0 to 11.6.0
Big Ip Application Security Manager
Version 12.0.0
Big Ip Domain Name System
Version 12.0.0
Big Ip Edge Gateway
From 11.1.0 to 11.3.0
Big Ip Global Traffic Manager
From 11.1.0 to 11.6.0
F5
Big Ip Link Controller
From 11.1.0 to 11.6.0
Big Ip Link Controller
Version 12.0.0
F5
Big Ip Local Traffic Manager
From 11.1.0 to 11.6.0
Big Ip Local Traffic Manager
Version 12.0.0
F5
Big Ip Policy Enforcement Manager
From 11.3.0 to 11.6.0
Big Ip Policy Enforcement Manager
Version 12.0.0
Big Ip Protocol Security Module
From 11.1.0 to 11.4.1
Big Ip Wan Optimization Manager
From 11.1.0 to 11.3.0
Big Ip Webaccelerator
From 11.1.0 to 11.3.0
Big Iq Application Delivery Controller
Version 4.5.0
Big Iq Cloud
From 4.0.0 to 4.5.0
Big Iq Device
From 4.2.0 to 4.5.0
Big Iq Security
From 4.0.0 to 4.5.0
Enterprise Manager
From 3.0.0 to 3.1.1

Related CWEs

CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (28)

Source: cve@mitre.org
Source: cve@mitre.org
Mailing ListThird Party Advisory
Source: cve@mitre.org
Mailing ListThird Party Advisory
Source: cve@mitre.org
Broken Link
Source: cve@mitre.org
Broken Link
Source: cve@mitre.org
Broken Link
Source: cve@mitre.org
Broken Link
Source: cve@mitre.org
Broken Link
Source: cve@mitre.org
Mailing ListPatchThird Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Issue TrackingPatchThird Party Advisory
Source: cve@mitre.org
PatchThird Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListPatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Issue TrackingPatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory

Timeline

No history available yet.