Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2014-0038
HistoryFeb 06, 2014 - 10:55 p.m.

CVE-2014-0038

2014-02-0622:55:03
CWE-20
[email protected]
web.nvd.nist.gov
6

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

AI Score

6

Confidence

Low

EPSS

0.001

Percentile

27.3%

JSON

The compat_sys_recvmmsg function in net/compat.c in the Linux kernel before 3.13.2, when CONFIG_X86_X32 is enabled, allows local users to gain privileges via a recvmmsg system call with a crafted timeout pointer parameter.

Affected configurations

Nvd
Node
linuxlinux_kernelRange3.4–3.4.79
OR
linuxlinux_kernelRange3.5–3.10.29
OR
linuxlinux_kernelRange3.11–3.12.10
OR
linuxlinux_kernelRange3.13–3.13.2
Node
opensuseopensuseMatch12.3
VendorProductVersionCPE
linuxlinux_kernel*cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
opensuseopensuse12.3cpe:2.3:o:opensuse:opensuse:12.3:*:*:*:*:*:*:*

References

Related

openvas 25
metasploit 1
mageia 10
slackware 1
kitploit 2
debiancve 1
nessus 13
securityvulns 3
prion 1
zdt 3
exploitdb 4
cvelist 1
packetstorm 2
canvas 1
ubuntu 3
seebug 2
hackerone 1
exploitpack 2
ubuntucve 1
cve 1
suse 4
oraclelinux 1
openvas
openvas
Mageia: Security Advisory (MGASA-2014-0039)
2022-01-28 00:00:00
Ubuntu: Security Advisory (USN-2094-1)
2014-02-03 00:00:00
Ubuntu: Security Advisory (USN-2095-1)
2014-02-03 00:00:00
metasploit
metasploit
Linux Kernel recvmmsg Privilege Escalation
2016-10-09 03:58:09
mageia
mageia
Updated kernel package fixes a critical security issue
2014-02-08 23:09:10
Updated kernel-linus package fixes security vulnerability
2014-02-12 21:17:13
Updated kernel-rt packages fix security vulnerability
2014-02-13 02:48:23
slackware
slackware
kernel
2014-02-19 20:29:09
kitploit
kitploit
Exploit Linux 3.4+ Arbitrary write with CONFIG_X86_X32
2014-02-04 19:07:00
Exploit Linux 3.4+ Local Root (CONFIG_X86_X32=y)
2014-02-04 19:10:00
debiancve
debiancve
CVE-2014-0038
2014-02-06 22:55:03
nessus
nessus
Slackware 14.1 : kernel (SSA:2014-050-03)
2014-02-20 00:00:00
Ubuntu 13.10 : linux vulnerability (USN-2096-1)
2014-01-31 00:00:00
Ubuntu 12.04 LTS : linux-lts-saucy vulnerability (USN-2095-1)
2014-01-31 00:00:00
securityvulns
securityvulns
[USN-2096-1] Linux kernel vulnerability
2014-02-01 00:00:00
[ MDVSA-2014:038 ] kernel
2014-02-18 00:00:00
Linux kernel security vulnerabilities
2014-03-31 00:00:00
prion
prion
Command injection
2014-02-06 22:55:00
zdt
zdt
Linux kernel 3.4+ Arbitrary write with CONFIG_X86_X32
2014-02-02 00:00:00
Linux kernel 3.4+ local root (CONFIG_X86_X32=y)
2014-02-02 00:00:00
Linux Kernel 3.13.1 - 'Recvmmsg' Privilege Escalation (Metasploit)
2016-10-12 00:00:00
exploitdb
exploitdb
Linux Kernel 3.4 < 3.13.2 - recvmmsg x32 compat (PoC)
2014-01-31 00:00:00
Linux Kernel 3.13.1 - 'Recvmmsg' Local Privilege Escalation (Metasploit)
2016-10-11 00:00:00
Linux Kernel 3.4 < 3.13.2 (Ubuntu 13.10) - 'CONFIG_X86_X32' Arbitrary Write (2)
2014-02-02 00:00:00
cvelist
cvelist
CVE-2014-0038
2014-02-06 22:00:00
packetstorm
packetstorm
X86_X32 recvmmsg Arbitrary Write Local Root
2014-02-03 00:00:00
Linux Kernel 3.13.1 Recvmmsg Privilege Escalation
2016-10-10 00:00:00
canvas
canvas
Immunity Canvas: RECVMMSG
2014-02-06 22:55:00
ubuntu
ubuntu
Linux kernel (Saucy HWE) vulnerability
2014-01-31 00:00:00
Linux kernel (Raring HWE) vulnerability
2014-01-31 00:00:00
Linux kernel vulnerability
2014-01-31 00:00:00
seebug
seebug
Linux 3.4+ - Arbitrary write with CONFIG_X86_X32
2014-07-01 00:00:00
linux 3.4+ - Local Root (CONFIG_X86_X32=y)
2014-07-01 00:00:00
hackerone
hackerone
Sandbox Escape: Linux 3.4+: arbitrary write with CONFIG_X86_X32
2014-01-28 23:52:58
exploitpack
exploitpack
Linux Kernel 3.4 3.13.2 (Ubuntu 13.0413.10 x64) - CONFIG_X86_X32y Local Privilege Escalation (3)
2014-02-02 00:00:00
Linux Kernel 3.4 3.13.2 (Ubuntu 13.10) - CONFIG_X86_X32 Arbitrary Write (2)
2014-02-02 00:00:00
ubuntucve
ubuntucve
CVE-2014-0038
2014-01-30 00:00:00
cve
cve
CVE-2014-0038
2014-02-06 22:55:03
suse
suse
kernel to 3.11.10 (important)
2014-02-06 19:21:55
Security update for the Linux Kernel (important)
2017-12-04 15:07:06
Security update for the Linux Kernel (important)
2017-12-08 18:11:43
oraclelinux
oraclelinux
Unbreakable Enterprise kernel security update
2014-05-19 00:00:00

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

AI Score

6

Confidence

Low

EPSS

0.001

Percentile

27.3%

JSON
Related for NVD:CVE-2014-0038
openvas25metasploit1mageia10slackware1kitploit2debiancve1nessus13securityvulns3prion1zdt3exploitdb4cvelist1packetstorm2canvas1ubuntu3seebug2hackerone1exploitpack2ubuntucve1cve1suse4oraclelinux1