Lucene search
Ubuntu.comUB:CVE-2014-0038HistoryJan 30, 2014 - 12:00 a.m.
CVE-2014-0038
2014-01-3000:00:00
ubuntu.com
ubuntu.com
15
6.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
0.001 Low
EPSS
Percentile
24.3%
The compat_sys_recvmmsg function in net/compat.c in the Linux kernel before
3.13.2, when CONFIG_X86_X32 is enabled, allows local users to gain
privileges via a recvmmsg system call with a crafted timeout pointer
parameter.
Bugs
Notes
| Author | Note |
|---|---|
| jj | x32 abi enabled kernels only: CONFIG_X86_X32 && ld can build x32 |
Related
nessus
nessus
Slackware 14.1 : kernel (SSA:2014-050-03)
2014-02-20 00:00:00
Ubuntu 13.10 : linux vulnerability (USN-2096-1)
2014-01-31 00:00:00
Ubuntu 12.04 LTS : linux-lts-raring vulnerability (USN-2094-1)
2014-01-31 00:00:00
zdt
zdt
Linux kernel 3.4+ Arbitrary write with CONFIG_X86_X32
2014-02-02 00:00:00
Linux kernel 3.4+ local root (CONFIG_X86_X32=y)
2014-02-02 00:00:00
Linux Kernel 3.13.1 - 'Recvmmsg' Privilege Escalation (Metasploit)
2016-10-12 00:00:00
prion
prion
Command injection
2014-02-06 22:55:00
openvas
openvas
Ubuntu Update for linux-lts-raring USN-2094-1
2014-02-03 00:00:00
Mageia: Security Advisory (MGASA-2014-0046)
2022-01-28 00:00:00
Mageia: Security Advisory (MGASA-2014-0061)
2022-01-28 00:00:00
securityvulns
securityvulns
[USN-2096-1] Linux kernel vulnerability
2014-02-01 00:00:00
[ MDVSA-2014:038 ] kernel
2014-02-18 00:00:00
Linux kernel security vulnerabilities
2014-03-31 00:00:00
kitploit
kitploit
Exploit Linux 3.4+ Local Root (CONFIG_X86_X32=y)
2014-02-04 19:10:00
Exploit Linux 3.4+ Arbitrary write with CONFIG_X86_X32
2014-02-04 19:07:00
mageia
mageia
Updated kernel-linus package fixes security vulnerability
2014-02-12 21:17:13
Updated kernel-rt packages fix security vulnerability
2014-02-13 02:48:23
Updated kernel package fixes a critical security issue
2014-02-08 23:09:10
debiancve
debiancve
CVE-2014-0038
2014-02-06 22:55:00
canvas
canvas
Immunity Canvas: RECVMMSG
2014-02-06 22:55:00
packetstorm
packetstorm
X86_X32 recvmmsg Arbitrary Write Local Root
2014-02-03 00:00:00
Linux Kernel 3.13.1 Recvmmsg Privilege Escalation
2016-10-10 00:00:00
ubuntu
ubuntu
Linux kernel (Saucy HWE) vulnerability
2014-01-31 00:00:00
Linux kernel vulnerability
2014-01-31 00:00:00
Linux kernel (Raring HWE) vulnerability
2014-01-31 00:00:00
exploitpack
exploitpack
seebug
seebug
linux 3.4+ - Local Root (CONFIG_X86_X32=y)
2014-07-01 00:00:00
Linux 3.4+ - Arbitrary write with CONFIG_X86_X32
2014-07-01 00:00:00
cve
cve
CVE-2014-0038
2014-02-06 22:55:00
slackware
slackware
kernel
2014-02-19 20:29:09
metasploit
metasploit
Linux Kernel recvmmsg Privilege Escalation
2016-10-09 03:58:09
hackerone
hackerone
Sandbox Escape: Linux 3.4+: arbitrary write with CONFIG_X86_X32
2014-01-28 23:52:58
exploitdb
exploitdb
suse
suse
kernel to 3.11.10 (important)
2014-02-06 19:21:55
Security update for the Linux Kernel (important)
2017-12-04 15:07:06
Security update for the Linux Kernel (important)
2017-12-08 18:11:43
oraclelinux
oraclelinux
Unbreakable Enterprise kernel security update
2014-05-19 00:00:00
6.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
0.001 Low
EPSS
Percentile
24.3%
Related for UB:CVE-2014-0038