QwikSec

Security Database

CVE

CWE

Training

CVE-2014-0102

Published: Mar 11, 2014

Modified: Aug 6, 2024

PUBLISHED

Description

The keyring_detect_cycle_iterator function in security/keys/keyring.c in the Linux kernel through 3.13.6 does not properly determine whether keyrings are identical, which allows local users to cause a denial of service (OOPS) via crafted keyctl commands.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

[oss-security] 20140304 CVE-2014-0102 -- Linux kernel: security: keyring cycle detector DoS

mailing-list

x_refsource_MLIST

http://www.kernelhub.org/?msg=425013&p=2

x_refsource_MISC

https://bugzilla.redhat.com/show_bug.cgi?id=1072419

x_refsource_CONFIRM

[linux-kernel] 20140227 kernel BUG at security/keys/keyring.c:1003!

mailing-list

x_refsource_MLIST

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.