Lucene search
Ubuntu.comUB:CVE-2014-5045HistoryAug 01, 2014 - 12:00 a.m.
CVE-2014-5045
2014-08-0100:00:00
ubuntu.com
ubuntu.com
22
CVSS2
6.2
Attack Vector
LOCAL
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:H/Au:N/C:C/I:C/A:C
EPSS
0
Percentile
5.1%
The mountpoint_last function in fs/namei.c in the Linux kernel before
3.15.8 does not properly maintain a certain reference count during attempts
to use the umount system call in conjunction with a symlink, which allows
local users to cause a denial of service (memory consumption or
use-after-free) or possibly have unspecified other impact via the umount
program.
Bugs
Notes
| Author | Note |
|---|---|
| jdstrand | android kernels (goldfish, grouper, maguro, mako and manta) are not supported on the Ubuntu Touch 13.10 preview kernels android kernels (flo, goldfish, grouper, maguro, mako and manta) are not supported on the Ubuntu Touch 14.04 preview kernels |
References
Related
prion
prion
Design/Logic Flaw
2014-08-01 11:13:00
debiancve
debiancve
CVE-2014-5045
2014-08-01 11:13:09
cve
cve
CVE-2014-5045
2014-08-01 11:13:09
cvelist
cvelist
CVE-2014-5045
2014-08-01 10:00:00
nvd
nvd
CVE-2014-5045
2014-08-01 11:13:09
redhat
redhat
(RHSA-2015:0062) Important: kernel security, bug fix, and enhancement update
2015-01-20 00:00:00
(RHSA-2014:1392) Important: kernel security, bug fix, and enhancement update
2014-10-14 00:00:00
(RHSA-2014:1971) Important: kernel security and bug fix update
2014-12-09 00:00:00
nessus
nessus
RHEL 6 : kernel (RHSA-2015:0062)
2015-01-21 00:00:00
Scientific Linux Security Update : kernel on SL6.x i386/x86_64 (20141014)
2014-11-04 00:00:00
Oracle Linux 6 : kernel (ELSA-2014-1392)
2014-10-22 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2014-0316)
2022-01-28 00:00:00
Mageia: Security Advisory (MGASA-2014-0336)
2022-01-28 00:00:00
Mageia: Security Advisory (MGASA-2014-0337)
2022-01-28 00:00:00
mageia
mageia
Updated kernel packages fix security vulnerabilities
2014-08-06 00:08:48
Updated kernel-linus package fixes security vulnerabilities
2014-08-18 13:14:56
Updated kernel-tmb package fixes security vulnerabilities
2014-08-18 13:14:56
veracode
veracode
Denial Of Service (DoS)
2019-05-02 05:12:40
Denial Of Service (DoS)
2019-05-02 05:12:39
Denial Of Service (DoS)
2019-05-02 05:12:40
centos
centos
kernel, perf, python security update
2014-10-20 18:09:23
kernel, perf, python security update
2014-12-10 12:48:13
oraclelinux
oraclelinux
kernel security, bug fix, and enhancement update
2014-10-20 00:00:00
kernel security and bug fix update
2014-12-09 00:00:00
ubuntu
ubuntu
Linux kernel vulnerabilities
2014-09-02 00:00:00
Linux kernel (Trusty HWE) vulnerabilities
2014-09-02 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: kernel-3.15.7-200.fc20
2014-08-01 06:02:53
[SECURITY] Fedora 20 Update: kernel-3.15.10-201.fc20
2014-08-30 03:58:11
[SECURITY] Fedora 20 Update: kernel-3.15.10-200.fc20
2014-08-16 22:30:46
CVSS2
6.2
Attack Vector
LOCAL
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:H/Au:N/C:C/I:C/A:C
EPSS
0
Percentile
5.1%
Related for UB:CVE-2014-5045