CVE-2014-1445

Published: Jan 18, 2014

Modified: Aug 6, 2024

PUBLISHED

Description

The wanxl_ioctl function in drivers/net/wan/wanxl.c in the Linux kernel before 3.11.7 does not properly initialize a certain data structure, which allows local users to obtain sensitive information from kernel memory via an ioctl call.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

USN-2129-1

vendor-advisory

x_refsource_UBUNTU

USN-2128-1

vendor-advisory

x_refsource_UBUNTU

http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.11.7

x_refsource_CONFIRM

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=2b13d06c9584b4eb773f1e80bbaedab9a1c344e1

x_refsource_CONFIRM

https://bugzilla.redhat.com/show_bug.cgi?id=1053613

x_refsource_CONFIRM

linux-kernel-cve20141445-info-disc(90444)

vdb-entry

x_refsource_XF

[oss-security] 20140115 Re: CVE request: assorted kernel infoleak security fixes

mailing-list

x_refsource_MLIST

https://github.com/torvalds/linux/commit/2b13d06c9584b4eb773f1e80bbaedab9a1c344e1

x_refsource_CONFIRM

64953

vdb-entry

x_refsource_BID

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2014-1445

Description

Affected Products

References