Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2014-1738
HistoryMay 11, 2014 - 9:55 p.m.

CVE-2014-1738

2014-05-1121:55:00
CWE-200
[email protected]
web.nvd.nist.gov
64
cve-2014-1738
linux kernel
floppy.c
fdrawcmd
ioctl call
local users
sensitive information
kernel heap memory
/dev/fd device
nvd

5.1 Medium

AI Score

Confidence

High

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

9.3%

JSON

The raw_cmd_copyout function in drivers/block/floppy.c in the Linux kernel through 3.14.3 does not properly restrict access to certain pointers during processing of an FDRAWCMD ioctl call, which allows local users to obtain sensitive information from kernel heap memory by leveraging write access to a /dev/fd device.

References

Related

ubuntucve 1
debiancve 1
prion 1
oraclelinux 8
redhat 9
nessus 45
openvas 71
securityvulns 4
debian 2
suse 6
centos 2
osv 2
mageia 10
ubuntu 10
altlinux 1
veracode 6
fedora 20
ubuntucve
ubuntucve
CVE-2014-1738
2014-05-11 00:00:00
debiancve
debiancve
CVE-2014-1738
2014-05-11 21:55:00
prion
prion
Design/Logic Flaw
2014-05-11 21:55:00
oraclelinux
oraclelinux
unbreakable enterprise kernel security update
2014-06-20 00:00:00
kernel security and bug fix update
2014-06-11 00:00:00
kernel security and bug fix update
2014-06-11 00:00:00
redhat
redhat
(RHSA-2014:0801) Important: kernel security update
2014-06-26 00:00:00
(RHSA-2014:0800) Important: kernel security update
2014-06-26 00:00:00
(RHSA-2014:0772) Important: kernel security and bug fix update
2014-06-19 00:00:00
nessus
nessus
Oracle Linux 6 : unbreakable enterprise kernel (ELSA-2014-3041)
2014-06-23 00:00:00
RHEL 5 : kernel (RHSA-2014:0801)
2014-11-17 00:00:00
RHEL 6 : kernel (RHSA-2014:0800)
2014-11-08 00:00:00
openvas
openvas
Oracle: Security Advisory (ELSA-2014-3041)
2015-10-06 00:00:00
CentOS Update for kernel CESA-2014:0740 centos5
2014-06-17 00:00:00
Debian Security Advisory DSA 2928-1 (linux-2.6 - privilege escalation/denial of service/information leak)
2014-05-14 00:00:00
securityvulns
securityvulns
[oss-security] Linux kernel floppy ioctl kernel code execution
2014-05-10 00:00:00
[SECURITY] [DSA 2926-1] linux security update
2014-05-15 00:00:00
[USN-2228-1] Linux kernel vulnerabilities
2014-05-29 00:00:00
debian
debian
[SECURITY] [DSA 2928-1] linux-2.6 security update
2014-05-14 18:21:22
[SECURITY] [DSA 2926-1] linux security update
2014-05-12 15:59:46
suse
suse
Security update for Linux kernel (important)
2014-05-20 19:04:37
Security update for Linux Kernel (important)
2014-05-16 03:04:20
kernel: security and bugfix update (important)
2014-05-19 14:04:14
centos
centos
kernel security update
2014-06-11 11:01:17
kernel, perf, python security update
2014-06-20 10:10:41
osv
osv
linux-2.6 - security update
2014-05-14 00:00:00
linux - security update
2014-05-12 00:00:00
mageia
mageia
Updated kernel-linus packages fix multiple vulnerabilities
2014-05-19 22:30:17
Updated kernel-rt packages fix multiple vulnerabilities
2014-05-19 22:30:17
Updated kernel packages fix multiple vulnerabilities
2014-05-18 03:41:52
ubuntu
ubuntu
Linux kernel vulnerabilities
2014-05-26 00:00:00
Linux kernel (EC2) vulnerabilities
2014-05-26 00:00:00
Linux kernel vulnerabilities
2014-05-27 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 7 package kernel-image-el-def version 2.6.32-alt25
2014-06-21 00:00:00
veracode
veracode
Denial Of Service (DoS)
2019-05-02 05:03:26
Information Disclosure
2019-05-02 05:03:25
Denial Of Service (DoS)
2019-05-02 05:03:26
fedora
fedora
[SECURITY] Fedora 20 Update: kernel-3.14.4-200.fc20
2014-05-16 10:04:40
[SECURITY] Fedora 20 Update: kernel-3.14.6-200.fc20
2014-06-11 16:31:10
[SECURITY] Fedora 20 Update: kernel-3.14.5-200.fc20
2014-06-05 21:52:16

5.1 Medium

AI Score

Confidence

High

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

9.3%

JSON
Related for CVE-2014-1738
ubuntucve1debiancve1prion1oraclelinux8redhat9nessus45openvas71securityvulns4debian2suse6centos2osv2mageia10ubuntu10altlinux1veracode6fedora20