CVE-2014-1444

🗓️ 18 Jan 2014 22:00:00Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 87 Views🌐 WEB

Linux kernel before 3.11.7 fst_get_iface function vulnerabilit

Reporter	Title	Published	Views	Family All 105
Cvelist	CVE-2014-1444	18 Jan 201422:00	–	cvelist
Debian	[SECURITY] [DSA 2906-1] linux-2.6 security update	25 Apr 201400:12	–	debian
Debian CVE	CVE-2014-1444	18 Jan 201422:00	–	debiancve
Tenable Nessus	Debian DSA-2906-1 : linux-2.6 - privilege escalation/denial of service/information leak	27 Apr 201400:00	–	nessus
Tenable Nessus	EulerOS Virtualization 3.0.1.0 : kernel (EulerOS-SA-2019-1479)	13 May 201900:00	–	nessus
Tenable Nessus	EulerOS Virtualization for ARM 64 3.0.1.0 : kernel (EulerOS-SA-2019-1503)	13 May 201900:00	–	nessus
Tenable Nessus	openSUSE Security Update : kernel (openSUSE-SU-2014:0677-1)	13 Jun 201400:00	–	nessus
Tenable Nessus	SuSE 11.3 Security Update : Linux kernel (SAT Patch Numbers 9488 / 9491 / 9493)	17 Jul 201400:00	–	nessus
Tenable Nessus	SUSE SLES11 Security Update : kernel (SUSE-SU-2014:0287-1)	20 May 201500:00	–	nessus
Tenable Nessus	SUSE SLES10 Security Update : kernel (SUSE-SU-2014:0536-1)	20 May 201500:00	–	nessus

NVD

Node

linux linux_kernelRange≤3.11.6

OR

linux linux_kernelMatch3.11

OR

linux linux_kernelMatch3.11.1

OR

linux linux_kernelMatch3.11.2

OR

linux linux_kernelMatch3.11.3

OR

linux linux_kernelMatch3.11.4

OR

linux linux_kernelMatch3.11.5

Source	Link
securityfocus	www.securityfocus.com/bid/64952
github	www.github.com/torvalds/linux/commit/96b340406724d87e4621284ebac5e059d67b2194
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
openwall	www.openwall.com/lists/oss-security/2014/01/15/3
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/90443
kernel	www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.11.7
ubuntu	www.ubuntu.com/usn/USN-2128-1
git	www.git.kernel.org/
ubuntu	www.ubuntu.com/usn/USN-2129-1

Parameter	Position	Path	Description	CWE
SIOCWANDEV	path	drivers/net/wan/farsync.c	The fst_get_iface function does not properly initialize a data structure, enabling local users with CAP_NET_ADMIN to leak kernel memory via the SIOCWANDEV ioctl.	CWE-399
CAP_NET_ADMIN	path	drivers/net/wan/farsync.c	The fst_get_iface function does not properly initialize a data structure, enabling local users with CAP_NET_ADMIN to leak kernel memory via the SIOCWANDEV ioctl.	CWE-399

29 Apr 2026 01:13Current

6Medium risk

Vulners AI Score6

CVSS 21.7

EPSS0.00071

cve-2014-1444 linux kernel vulnerability fst_get_iface drivers/net/wan/farsync.c cap_net_admin siocwandev ioctl call