Lucene search
Ubuntu.comUB:CVE-2014-5332HistoryFeb 06, 2015 - 12:00 a.m.
CVE-2014-5332
2015-02-0600:00:00
ubuntu.com
ubuntu.com
7
6.9 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
0.0004 Low
EPSS
Percentile
5.1%
Race condition in NVMap in NVIDIA Tegra Linux Kernel 3.10 allows local
users to gain privileges via a crafted NVMAP_IOC_CREATE IOCTL call, which
triggers a use-after-free error, as demonstrated by using a race condition
to escape the Chrome sandbox.
Bugs
Notes
| Author | Note |
|---|---|
| jdstrand | android kernels (flo, goldfish, grouper, maguro, mako and manta) are not supported on the Ubuntu Touch 14.10 and earlier preview kernels linux-lts-saucy no longer receives official support linux-lts-quantal no longer receives official support |
Related
googleprojectzero
googleprojectzero
Exploiting NVMAP to escape the Chrome sandbox - CVE-2014-5332
2015-01-22 00:00:00
cvelist
cvelist
CVE-2014-5332
2015-02-06 11:00:00
prion
prion
Race condition
2015-02-06 11:59:00
nvd
nvd
CVE-2014-5332
2015-02-06 11:59:03
cve
cve
CVE-2014-5332
2015-02-06 11:59:03
debiancve
debiancve
CVE-2014-5332
2015-02-06 11:59:03
6.9 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
0.0004 Low
EPSS
Percentile
5.1%
Related for UB:CVE-2014-5332