Lucene search

K
cve[email protected]CVE-2014-3917
HistoryJun 05, 2014 - 5:55 p.m.

CVE-2014-3917

2014-06-0517:55:00
CWE-200
web.nvd.nist.gov
102
cve-2014-3917
linux kernel
auditsc.c
config_auditsyscall
syscall rules
local users
kernel memory
denial of service
oops
nvd

5.8 Medium

AI Score

Confidence

High

3.3 Low

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:N/A:P

0.0004 Low

EPSS

Percentile

5.3%

kernel/auditsc.c in the Linux kernel through 3.14.5, when CONFIG_AUDITSYSCALL is enabled with certain syscall rules, allows local users to obtain potentially sensitive single-bit values from kernel memory or cause a denial of service (OOPS) via a large value of a syscall number.

5.8 Medium

AI Score

Confidence

High

3.3 Low

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:N/A:P

0.0004 Low

EPSS

Percentile

5.3%