6.8 Medium
AI Score
Confidence
High
6.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
0.001 Low
EPSS
Percentile
49.1%
Sasha Levin reported a flaw in the Linux kernel’s point-to-point protocol
(PPP) when used with the Layer Two Tunneling Protocol (L2TP). A local user
could exploit this flaw to gain administrative privileges. (CVE-2014-4943)
Michael S. Tsirkin discovered an information leak in the Linux kernel’s
segmentation of skbs when using the zerocopy feature of vhost-net. A local
attacker could exploit this flaw to gain potentially sensitive information
from kernel memory. (CVE-2014-0131)
Salva Peiró discovered an information leak in the Linux kernel’s media-
device driver. A local attacker could exploit this flaw to obtain sensitive
information from kernel memory. (CVE-2014-1739)
An flaw was discovered in the Linux kernel’s audit subsystem when auditing
certain syscalls. A local attacker could exploit this flaw to obtain
potentially sensitive single-bit values from kernel memory or cause a
denial of service (OOPS). (CVE-2014-3917)
A flaw was discovered in the Linux kernel’s implementation of user
namespaces with respect to inode permissions. A local user could exploit
this flaw by creating a user namespace to gain administrative privileges.
(CVE-2014-4014)
An information leak was discovered in the rd_mcp backend of the iSCSI
target subsystem in the Linux kernel. A local user could exploit this flaw
to obtain sensitive information from ramdisk_mcp memory by leveraging
access to a SCSI initiator. (CVE-2014-4027)
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Ubuntu | 12.04 | noarch | linux-image-3.5.0-54-generic | < 3.5.0-54.81~precise1 | UNKNOWN |
Ubuntu | 12.04 | noarch | block-modules-3.5.0-54-generic-di | < 3.5.0-54.81~precise1 | UNKNOWN |
Ubuntu | 12.04 | noarch | crypto-modules-3.5.0-54-generic-di | < 3.5.0-54.81~precise1 | UNKNOWN |
Ubuntu | 12.04 | noarch | fat-modules-3.5.0-54-generic-di | < 3.5.0-54.81~precise1 | UNKNOWN |
Ubuntu | 12.04 | noarch | fb-modules-3.5.0-54-generic-di | < 3.5.0-54.81~precise1 | UNKNOWN |
Ubuntu | 12.04 | noarch | firewire-core-modules-3.5.0-54-generic-di | < 3.5.0-54.81~precise1 | UNKNOWN |
Ubuntu | 12.04 | noarch | floppy-modules-3.5.0-54-generic-di | < 3.5.0-54.81~precise1 | UNKNOWN |
Ubuntu | 12.04 | noarch | fs-core-modules-3.5.0-54-generic-di | < 3.5.0-54.81~precise1 | UNKNOWN |
Ubuntu | 12.04 | noarch | fs-secondary-modules-3.5.0-54-generic-di | < 3.5.0-54.81~precise1 | UNKNOWN |
Ubuntu | 12.04 | noarch | input-modules-3.5.0-54-generic-di | < 3.5.0-54.81~precise1 | UNKNOWN |