CVE-2014-0069

2014-02-2800:00:00

ubuntu.com

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.3%

JSON

The cifs_iovec_write function in fs/cifs/file.c in the Linux kernel through
3.13.5 does not properly handle uncached write operations that copy fewer
than the requested number of bytes, which allows local users to obtain
sensitive information from kernel memory, cause a denial of service (memory
corruption and system crash), or possibly gain privileges via a writev
system call with a crafted pointer.

Bugs

Notes

Author	Note
jdstrand	android kernels (goldfish, grouper, maguro, mako and manta) are not supported on the Ubuntu Touch 13.10 preview kernels
seth-arnold	fix not yet in Linus’s tree as of 2014-02-20
apw	it seems the first fix is the CVE fix and will be: 5d81de8e8667da7135d3a32a964087c0faf5483f the second patch is a nice to have for future issues patch: http://article.gmane.org/gmane.linux.kernel.cifs/9401 (fixes bug) patch: http://article.gmane.org/gmane.linux.kernel.cifs/9402 (hardening)

OSVersionArchitecturePackageVersionFilename
ubuntu12.04noarchlinux< 3.2.0-63.95UNKNOWN
ubuntu12.10noarchlinux< 3.5.0-49.73UNKNOWN
ubuntu13.10noarchlinux< 3.11.0-20.34UNKNOWN
ubuntu12.04noarchlinux-armadaxp< 3.2.0-1633.47UNKNOWN
ubuntu12.10noarchlinux-armadaxp< 3.5.0-1630.39UNKNOWN
ubuntu12.04noarchlinux-lts-quantal< 3.5.0-49.73~precise1UNKNOWN
ubuntu12.04noarchlinux-lts-raring< 3.8.0-39.57~precise1UNKNOWN
ubuntu12.04noarchlinux-lts-saucy< 3.11.0-20.34~precise1UNKNOWN
ubuntu12.04noarchlinux-ti-omap4< 3.2.0-1446.65UNKNOWN
ubuntu12.10noarchlinux-ti-omap4< 3.5.0-241.57UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	12.04	noarch	linux	< 3.2.0-63.95	UNKNOWN
ubuntu	12.10	noarch	linux	< 3.5.0-49.73	UNKNOWN
ubuntu	13.10	noarch	linux	< 3.11.0-20.34	UNKNOWN
ubuntu	12.04	noarch	linux-armadaxp	< 3.2.0-1633.47	UNKNOWN
ubuntu	12.10	noarch	linux-armadaxp	< 3.5.0-1630.39	UNKNOWN
ubuntu	12.04	noarch	linux-lts-quantal	< 3.5.0-49.73~precise1	UNKNOWN
ubuntu	12.04	noarch	linux-lts-raring	< 3.8.0-39.57~precise1	UNKNOWN
ubuntu	12.04	noarch	linux-lts-saucy	< 3.11.0-20.34~precise1	UNKNOWN
ubuntu	12.04	noarch	linux-ti-omap4	< 3.2.0-1446.65	UNKNOWN
ubuntu	12.10	noarch	linux-ti-omap4	< 3.5.0-241.57	UNKNOWN