Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
prionPRIOn knowledge basePRION:CVE-2014-0038
HistoryFeb 06, 2014 - 10:55 p.m.

Command injection

2014-02-0622:55:00
PRIOn knowledge base
www.prio-n.com
7

6.6 Medium

AI Score

Confidence

Low

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

23.3%

JSON

The compat_sys_recvmmsg function in net/compat.c in the Linux kernel before 3.13.2, when CONFIG_X86_X32 is enabled, allows local users to gain privileges via a recvmmsg system call with a crafted timeout pointer parameter.

References

Related

nessus 13
zdt 3
openvas 25
securityvulns 3
debiancve 1
mageia 10
kitploit 2
exploitpack 2
seebug 2
ubuntucve 1
cve 1
ubuntu 3
canvas 1
packetstorm 2
slackware 1
metasploit 1
hackerone 1
exploitdb 3
suse 4
oraclelinux 1
nessus
nessus
Slackware 14.1 : kernel (SSA:2014-050-03)
2014-02-20 00:00:00
Ubuntu 12.04 LTS : linux-lts-raring vulnerability (USN-2094-1)
2014-01-31 00:00:00
Ubuntu 13.10 : linux vulnerability (USN-2096-1)
2014-01-31 00:00:00
zdt
zdt
Linux kernel 3.4+ Arbitrary write with CONFIG_X86_X32
2014-02-02 00:00:00
Linux kernel 3.4+ local root (CONFIG_X86_X32=y)
2014-02-02 00:00:00
Linux Kernel 3.13.1 - 'Recvmmsg' Privilege Escalation (Metasploit)
2016-10-12 00:00:00
openvas
openvas
Ubuntu Update for linux-lts-raring USN-2094-1
2014-02-03 00:00:00
Ubuntu: Security Advisory (USN-2095-1)
2014-02-03 00:00:00
Ubuntu: Security Advisory (USN-2094-1)
2014-02-03 00:00:00
securityvulns
securityvulns
[USN-2096-1] Linux kernel vulnerability
2014-02-01 00:00:00
[ MDVSA-2014:038 ] kernel
2014-02-18 00:00:00
Linux kernel security vulnerabilities
2014-03-31 00:00:00
debiancve
debiancve
CVE-2014-0038
2014-02-06 22:55:00
mageia
mageia
Updated kernel-linus package fixes security vulnerability
2014-02-12 21:17:13
Updated kernel-rt packages fix security vulnerability
2014-02-13 02:48:23
Updated kernel package fixes a critical security issue
2014-02-08 23:09:10
kitploit
kitploit
Exploit Linux 3.4+ Arbitrary write with CONFIG_X86_X32
2014-02-04 19:07:00
Exploit Linux 3.4+ Local Root (CONFIG_X86_X32=y)
2014-02-04 19:10:00
exploitpack
exploitpack
Linux Kernel 3.4 3.13.2 (Ubuntu 13.10) - CONFIG_X86_X32 Arbitrary Write (2)
2014-02-02 00:00:00
Linux Kernel 3.4 3.13.2 (Ubuntu 13.0413.10 x64) - CONFIG_X86_X32y Local Privilege Escalation (3)
2014-02-02 00:00:00
seebug
seebug
linux 3.4+ - Local Root (CONFIG_X86_X32=y)
2014-07-01 00:00:00
Linux 3.4+ - Arbitrary write with CONFIG_X86_X32
2014-07-01 00:00:00
ubuntucve
ubuntucve
CVE-2014-0038
2014-01-30 00:00:00
cve
cve
CVE-2014-0038
2014-02-06 22:55:00
ubuntu
ubuntu
Linux kernel vulnerability
2014-01-31 00:00:00
Linux kernel (Saucy HWE) vulnerability
2014-01-31 00:00:00
Linux kernel (Raring HWE) vulnerability
2014-01-31 00:00:00
canvas
canvas
Immunity Canvas: RECVMMSG
2014-02-06 22:55:00
packetstorm
packetstorm
X86_X32 recvmmsg Arbitrary Write Local Root
2014-02-03 00:00:00
Linux Kernel 3.13.1 Recvmmsg Privilege Escalation
2016-10-10 00:00:00
slackware
slackware
kernel
2014-02-19 20:29:09
metasploit
metasploit
Linux Kernel recvmmsg Privilege Escalation
2016-10-09 03:58:09
hackerone
hackerone
Sandbox Escape: Linux 3.4+: arbitrary write with CONFIG_X86_X32
2014-01-28 23:52:58
exploitdb
exploitdb
Linux Kernel 3.4 < 3.13.2 (Ubuntu 13.04/13.10 x64) - 'CONFIG_X86_X32=y' Local Privilege Escalation (3)
2014-02-02 00:00:00
Linux Kernel 3.13.1 - 'Recvmmsg' Local Privilege Escalation (Metasploit)
2016-10-11 00:00:00
Linux Kernel 3.4 < 3.13.2 (Ubuntu 13.10) - 'CONFIG_X86_X32' Arbitrary Write (2)
2014-02-02 00:00:00
suse
suse
kernel to 3.11.10 (important)
2014-02-06 19:21:55
Security update for the Linux Kernel (important)
2017-12-04 15:07:06
Security update for the Linux Kernel (important)
2017-12-08 18:11:43
oraclelinux
oraclelinux
Unbreakable Enterprise kernel security update
2014-05-19 00:00:00

6.6 Medium

AI Score

Confidence

Low

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

23.3%

JSON
Related for PRION:CVE-2014-0038
nessus13zdt3openvas25securityvulns3debiancve1mageia10kitploit2exploitpack2seebug2ubuntucve1cve1ubuntu3canvas1packetstorm2slackware1metasploit1hackerone1exploitdb3suse4oraclelinux1