CVE-2014-1739

2014-06-2300:00:00

ubuntu.com

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

9.6%

JSON

The media_device_enum_entities function in drivers/media/media-device.c in
the Linux kernel before 3.14.6 does not initialize a certain data
structure, which allows local users to obtain sensitive information from
kernel memory by leveraging /dev/media0 read access for a
MEDIA_IOC_ENUM_ENTITIES ioctl call.

Bugs

<https://launchpad.net/bugs/1333609>

Notes

Author	Note
jdstrand	android kernels (goldfish, grouper, maguro, mako and manta) are not supported on the Ubuntu Touch 13.10 preview kernels android kernels (flo, goldfish, grouper, maguro, mako and manta) are not supported on the Ubuntu Touch 14.04 preview kernels

OSVersionArchitecturePackageVersionFilename
ubuntu12.04noarchlinux< 3.2.0-65.98UNKNOWN
ubuntu13.10noarchlinux< 3.11.0-24.41UNKNOWN
ubuntu14.04noarchlinux< 3.13.0-32.57UNKNOWN
ubuntu12.04noarchlinux-armadaxp< 3.2.0-1635.50UNKNOWN
ubuntu12.04noarchlinux-lts-quantal< 3.5.0-54.81~precise1UNKNOWN
ubuntu12.04noarchlinux-lts-raring< 3.8.0-44.66~precise1UNKNOWN
ubuntu12.04noarchlinux-lts-saucy< 3.11.0-24.41~precise1UNKNOWN
ubuntu12.04noarchlinux-lts-trusty< 3.13.0-32.57~precise1UNKNOWN
ubuntu12.04noarchlinux-ti-omap4< 3.2.0-1450.69UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	12.04	noarch	linux	< 3.2.0-65.98	UNKNOWN
ubuntu	13.10	noarch	linux	< 3.11.0-24.41	UNKNOWN
ubuntu	14.04	noarch	linux	< 3.13.0-32.57	UNKNOWN
ubuntu	12.04	noarch	linux-armadaxp	< 3.2.0-1635.50	UNKNOWN
ubuntu	12.04	noarch	linux-lts-quantal	< 3.5.0-54.81~precise1	UNKNOWN
ubuntu	12.04	noarch	linux-lts-raring	< 3.8.0-44.66~precise1	UNKNOWN
ubuntu	12.04	noarch	linux-lts-saucy	< 3.11.0-24.41~precise1	UNKNOWN
ubuntu	12.04	noarch	linux-lts-trusty	< 3.13.0-32.57~precise1	UNKNOWN
ubuntu	12.04	noarch	linux-ti-omap4	< 3.2.0-1450.69	UNKNOWN