Lucene search

K
ubuntucveUbuntu.comUB:CVE-2014-5045
HistoryAug 01, 2014 - 12:00 a.m.

CVE-2014-5045

2014-08-0100:00:00
ubuntu.com
ubuntu.com
12

6.2 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:H/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.3%

The mountpoint_last function in fs/namei.c in the Linux kernel before
3.15.8 does not properly maintain a certain reference count during attempts
to use the umount system call in conjunction with a symlink, which allows
local users to cause a denial of service (memory consumption or
use-after-free) or possibly have unspecified other impact via the umount
program.

Bugs

Notes

Author Note
jdstrand android kernels (goldfish, grouper, maguro, mako and manta) are not supported on the Ubuntu Touch 13.10 preview kernels android kernels (flo, goldfish, grouper, maguro, mako and manta) are not supported on the Ubuntu Touch 14.04 preview kernels
OSVersionArchitecturePackageVersionFilename
ubuntu14.04noarchlinux< 3.13.0-35.62UNKNOWN
ubuntu12.04noarchlinux-lts-trusty< 3.13.0-35.62~precise1UNKNOWN

6.2 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:H/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.3%