Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2014-1738
HistoryMay 11, 2014 - 12:00 a.m.

CVE-2014-1738

2014-05-1100:00:00
ubuntu.com
ubuntu.com
14

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

9.3%

JSON

The raw_cmd_copyout function in drivers/block/floppy.c in the Linux kernel
through 3.14.3 does not properly restrict access to certain pointers during
processing of an FDRAWCMD ioctl call, which allows local users to obtain
sensitive information from kernel heap memory by leveraging write access to
a /dev/fd device.

Bugs

Notes

Author Note
jdstrand android kernels (goldfish, grouper, maguro, mako and manta) are not supported on the Ubuntu Touch 13.10 preview kernels android kernels (flo, goldfish, grouper, maguro, mako and manta) are not supported on the Ubuntu Touch 14.04 preview kernels
OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchlinux< 2.6.32-60.122UNKNOWN
ubuntu12.04noarchlinux< 3.2.0-63.95UNKNOWN
ubuntu13.10noarchlinux< 3.11.0-22.38UNKNOWN
ubuntu14.04noarchlinux< 3.13.0-27.50UNKNOWN
ubuntu12.04noarchlinux-armadaxp< 3.2.0-1633.47UNKNOWN
ubuntu10.04noarchlinux-ec2< 2.6.32-364.77UNKNOWN
ubuntu12.04noarchlinux-lts-quantal< 3.5.0-51.76~precise1UNKNOWN
ubuntu12.04noarchlinux-lts-raring< 3.8.0-41.60~precise1UNKNOWN
ubuntu12.04noarchlinux-lts-saucy< 3.11.0-22.38~precise1UNKNOWN
ubuntu12.04noarchlinux-lts-trusty< 3.13.0-27.50~precise1UNKNOWN
Rows per page:
1-10 of 121

Related

cve 1
prion 1
debiancve 1
oraclelinux 8
redhat 9
nessus 45
openvas 71
securityvulns 4
debian 2
suse 6
osv 2
centos 2
mageia 10
ubuntu 10
altlinux 1
veracode 6
fedora 20
cve
cve
CVE-2014-1738
2014-05-11 21:55:00
prion
prion
Design/Logic Flaw
2014-05-11 21:55:00
debiancve
debiancve
CVE-2014-1738
2014-05-11 21:55:00
oraclelinux
oraclelinux
unbreakable enterprise kernel security update
2014-06-20 00:00:00
kernel security and bug fix update
2014-06-11 00:00:00
kernel security and bug fix update
2014-06-11 00:00:00
redhat
redhat
(RHSA-2014:0801) Important: kernel security update
2014-06-26 00:00:00
(RHSA-2014:0800) Important: kernel security update
2014-06-26 00:00:00
(RHSA-2014:0772) Important: kernel security and bug fix update
2014-06-19 00:00:00
nessus
nessus
Oracle Linux 6 : unbreakable enterprise kernel (ELSA-2014-3041)
2014-06-23 00:00:00
RHEL 5 : kernel (RHSA-2014:0801)
2014-11-17 00:00:00
RHEL 6 : kernel (RHSA-2014:0800)
2014-11-08 00:00:00
openvas
openvas
Oracle: Security Advisory (ELSA-2014-3041)
2015-10-06 00:00:00
CentOS Update for kernel CESA-2014:0740 centos5
2014-06-17 00:00:00
Debian Security Advisory DSA 2928-1 (linux-2.6 - privilege escalation/denial of service/information leak)
2014-05-14 00:00:00
securityvulns
securityvulns
[oss-security] Linux kernel floppy ioctl kernel code execution
2014-05-10 00:00:00
[SECURITY] [DSA 2926-1] linux security update
2014-05-15 00:00:00
[USN-2228-1] Linux kernel vulnerabilities
2014-05-29 00:00:00
debian
debian
[SECURITY] [DSA 2928-1] linux-2.6 security update
2014-05-14 18:21:22
[SECURITY] [DSA 2926-1] linux security update
2014-05-12 15:59:46
suse
suse
Security update for Linux kernel (important)
2014-05-20 19:04:37
Security update for Linux Kernel (important)
2014-05-16 03:04:20
kernel: security and bugfix update (important)
2014-05-19 14:04:14
osv
osv
linux-2.6 - security update
2014-05-14 00:00:00
linux - security update
2014-05-12 00:00:00
centos
centos
kernel security update
2014-06-11 11:01:17
kernel, perf, python security update
2014-06-20 10:10:41
mageia
mageia
Updated kernel-linus packages fix multiple vulnerabilities
2014-05-19 22:30:17
Updated kernel-rt packages fix multiple vulnerabilities
2014-05-19 22:30:17
Updated kernel packages fix multiple vulnerabilities
2014-05-18 03:41:52
ubuntu
ubuntu
Linux kernel vulnerabilities
2014-05-26 00:00:00
Linux kernel (EC2) vulnerabilities
2014-05-26 00:00:00
Linux kernel vulnerabilities
2014-05-27 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 7 package kernel-image-el-def version 2.6.32-alt25
2014-06-21 00:00:00
veracode
veracode
Denial Of Service (DoS)
2019-05-02 05:03:26
Information Disclosure
2019-05-02 05:03:25
Denial Of Service (DoS)
2019-05-02 05:03:26
fedora
fedora
[SECURITY] Fedora 20 Update: kernel-3.14.4-200.fc20
2014-05-16 10:04:40
[SECURITY] Fedora 20 Update: kernel-3.14.6-200.fc20
2014-06-11 16:31:10
[SECURITY] Fedora 20 Update: kernel-3.14.5-200.fc20
2014-06-05 21:52:16

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

9.3%

JSON
Related for UB:CVE-2014-1738
cve1prion1debiancve1oraclelinux8redhat9nessus45openvas71securityvulns4debian2suse6osv2centos2mageia10ubuntu10altlinux1veracode6fedora20