7.3 High
AI Score
Confidence
High
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.011 Low
EPSS
Percentile
84.5%
Sasha Levin reported a flaw in the Linux kernel’s point-to-point protocol
(PPP) when used with the Layer Two Tunneling Protocol (L2TP). A local user
could exploit this flaw to gain administrative privileges. (CVE-2014-4943)
Michael S. Tsirkin discovered an information leak in the Linux kernel’s
segmentation of skbs when using the zerocopy feature of vhost-net. A local
attacker could exploit this flaw to gain potentially sensitive information
from kernel memory. (CVE-2014-0131)
Salva Peiró discovered an information leak in the Linux kernel’s media-
device driver. A local attacker could exploit this flaw to obtain sensitive
information from kernel memory. (CVE-2014-1739)
A bounds check error was discovered in the socket filter subsystem of the
Linux kernel. A local user could exploit this flaw to cause a denial of
service (system crash) via crafted BPF instructions. (CVE-2014-3144)
A remainder calculation error was discovered in the socket filter subsystem
of the Linux kernel. A local user could exploit this flaw to cause a denial
of service (system crash) via crafted BPF instructions. (CVE-2014-3145)
An flaw was discovered in the Linux kernel’s audit subsystem when auditing
certain syscalls. A local attacker could exploit this flaw to obtain
potentially sensitive single-bit values from kernel memory or cause a
denial of service (OOPS). (CVE-2014-3917)
A flaw was discovered in the Linux kernel’s implementation of user
namespaces with respect to inode permissions. A local user could exploit
this flaw by creating a user namespace to gain administrative privileges.
(CVE-2014-4014)
Don Bailey discovered a flaw in the LZO decompress algorithm used by the
Linux kernel. An attacker could exploit this flaw to cause a denial of
service (memory corruption or OOPS). (CVE-2014-4608)
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Ubuntu | 12.04 | noarch | linux-image-3.8.0-44-generic | < 3.8.0-44.66~precise1 | UNKNOWN |
Ubuntu | 12.04 | noarch | block-modules-3.8.0-44-generic-di | < 3.8.0-44.66~precise1 | UNKNOWN |
Ubuntu | 12.04 | noarch | crypto-modules-3.8.0-44-generic-di | < 3.8.0-44.66~precise1 | UNKNOWN |
Ubuntu | 12.04 | noarch | fat-modules-3.8.0-44-generic-di | < 3.8.0-44.66~precise1 | UNKNOWN |
Ubuntu | 12.04 | noarch | fb-modules-3.8.0-44-generic-di | < 3.8.0-44.66~precise1 | UNKNOWN |
Ubuntu | 12.04 | noarch | firewire-core-modules-3.8.0-44-generic-di | < 3.8.0-44.66~precise1 | UNKNOWN |
Ubuntu | 12.04 | noarch | floppy-modules-3.8.0-44-generic-di | < 3.8.0-44.66~precise1 | UNKNOWN |
Ubuntu | 12.04 | noarch | fs-core-modules-3.8.0-44-generic-di | < 3.8.0-44.66~precise1 | UNKNOWN |
Ubuntu | 12.04 | noarch | fs-secondary-modules-3.8.0-44-generic-di | < 3.8.0-44.66~precise1 | UNKNOWN |
Ubuntu | 12.04 | noarch | input-modules-3.8.0-44-generic-di | < 3.8.0-44.66~precise1 | UNKNOWN |