Lucene search

K
ubuntucveUbuntu.comUB:CVE-2014-2889
HistoryApr 27, 2014 - 12:00 a.m.

CVE-2014-2889

2014-04-2700:00:00
ubuntu.com
ubuntu.com
8

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

5.1%

Off-by-one error in the bpf_jit_compile function in
arch/x86/net/bpf_jit_comp.c in the Linux kernel before 3.1.8, when BPF JIT
is enabled, allows local users to cause a denial of service (system crash)
or possibly gain privileges via a long jump after a conditional jump.

Bugs

Notes

Author Note
jdstrand android kernels (goldfish, grouper, maguro, mako and manta) are not supported on the Ubuntu Touch 13.10 preview kernels android kernels (flo, goldfish, grouper, maguro, mako and manta) are not supported on the Ubuntu Touch 14.04 preview kernels

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

5.1%

Related for UB:CVE-2014-2889