Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2014-1737

Good to know:

icon

Date: May 11, 2014

The raw_cmd_copyin function in drivers/block/floppy.c in the Linux kernel through 3.14.3 does not properly handle error conditions during processing of an FDRAWCMD ioctl call, which allows local users to trigger kfree operations and gain privileges by leveraging write access to a /dev/fd device.

Language: C

Severity Score

Related Resources (24)

https://bugzilla.redhat.com/show_bug.cgi?id=1094299
http://secunia.com/advisories/59599
http://rhn.redhat.com/errata/RHSA-2014-0801.html
https://access.redhat.com/security/cve/CVE-2014-1737
https://security-tracker.debian.org/tracker/CVE-2014-1737
http://www.debian.org/security/2014/dsa-2928
http://www.debian.org/security/2014/dsa-2926
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=ef87dbe7614341c2e7bfe8d32fcb7028cc97442c
http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00012.html
http://secunia.com/advisories/59309
http://linux.oracle.com/errata/ELSA-2014-3043.html
http://secunia.com/advisories/59406
http://rhn.redhat.com/errata/RHSA-2014-0800.html
http://linux.oracle.com/errata/ELSA-2014-0771.html
http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00007.html
http://www.securitytracker.com/id/1030474
http://secunia.com/advisories/59262
https://nvd.nist.gov/vuln/detail/CVE-2014-1737
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ef87dbe7614341c2e7bfe8d32fcb7028cc97442c
http://www.securityfocus.com/bid/67300
https://github.com/torvalds/linux/commit/ef87dbe7614341c2e7bfe8d32fcb7028cc97442c
http://www.openwall.com/lists/oss-security/2014/05/09/2
https://people.canonical.com/~ubuntu-security/cve/CVE-2014-1737
https://www.mend.io/vulnerability-database/CVE-2014-1737

Severity Score

Weakness Type (CWE)

Improper Check for Unusual or Exceptional Conditions

CWE-754

Permissions, Privileges, and Access Control

CWE-264

Top Fix

icon

Upgrade Version

Upgrade to version v3.15-rc5

Learn More

CVSS v3.1

Base Score:
Attack Vector (AV): LOCAL
Attack Complexity (AC): LOW
Privileges Required (PR): NONE
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): HIGH
Integrity (I): HIGH
Availability (A): HIGH

CVSS v2

Base Score:
Access Vector (AV): LOCAL
Access Complexity (AC): LOW
Authentication (AU): NONE
Confidentiality (C): COMPLETE
Integrity (I): COMPLETE
Availability (A): COMPLETE
Additional information:

Do you need more information?

Contact Us