Back to search
CVE-2014-1738
Published: May 11, 2014
Modified: Aug 6, 2024
PUBLISHED
Description
The raw_cmd_copyout function in drivers/block/floppy.c in the Linux kernel through 3.14.3 does not properly restrict access to certain pointers during processing of an FDRAWCMD ioctl call, which allows local users to obtain sensitive information from kernel heap memory by leveraging write access to a /dev/fd device.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
SUSE-SU-2014:0683
vendor-advisory
x_refsource_SUSE
67302
vdb-entry
x_refsource_BID
59262
third-party-advisory
x_refsource_SECUNIA
59309
third-party-advisory
x_refsource_SECUNIA
59406
third-party-advisory
x_refsource_SECUNIA
DSA-2928
vendor-advisory
x_refsource_DEBIAN
https://bugzilla.redhat.com/show_bug.cgi?id=1094299
x_refsource_CONFIRM
http://linux.oracle.com/errata/ELSA-2014-0771.html
x_refsource_CONFIRM
RHSA-2014:0800
vendor-advisory
x_refsource_REDHAT
[oss-security] 20140509 Linux kernel floppy ioctl kernel code execution
mailing-list
x_refsource_MLIST
59599
third-party-advisory
x_refsource_SECUNIA
DSA-2926
vendor-advisory
x_refsource_DEBIAN
SUSE-SU-2014:0667
vendor-advisory
x_refsource_SUSE
1030474
vdb-entry
x_refsource_SECTRACK
http://linux.oracle.com/errata/ELSA-2014-3043.html
x_refsource_CONFIRM
RHSA-2014:0801
vendor-advisory
x_refsource_REDHAT
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now