Design/Logic Flaw

The fstgetiface function in drivers/net/wan/farsync.c in the Linux kernel before 3.11.7 does not properly initialize a certain data structure, which allows local users to obtain sensitive information from kernel memory by leveraging the CAPNETADMIN capability for an SIOCWANDEV ioctl call...

CVE-2014-1444

Technical details beyond the Initial Description are not publicly provided in the connected documents. Monitor for updates from upstream advisories to confirm affected products, versions, and fixes.

Linux Kernel 'farsync.c'本地信息泄露漏洞

BUGTRAQ ID: 64952 CVECAN ID: CVE-2014-1444 Linux Kernel是Linux操作系统的内核。 Linux kernel在实现上存在本地信息泄露漏洞，本地攻击者可利用此漏洞造成内存泄露敏感信息。 0 Linux kernel 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.kernel.org/...