CVE-2014-1738

CVE Details

Release Date:2014-05-07

Description


A flaw was found in the way the Linux kernel's floppy driver handled user space provided data in certain error code paths while processing FDRAWCMD IOCTL commands. A local user with write access to /dev/fdX could use this flaw to free (using the kfree() function) arbitrary kernel memory. (CVE-2014-1737, Important)

See more information about CVE-2014-1738 from MITRE CVE dictionary and NIST NVD


CVSS v2 metrics


NOTE: The following CVSS v2 metrics and score provided are preliminary and subject to review.

Base Score:6.6 Base Metrics:AV:L/AC:M/Au:S/C:C/I:C/A:C
Access Vector: Local network Confidentiality Impact: Complete
Access Impact: Medium Integrity Impact: Complete
Authentication: Requires single instance Availability Impact: Complete

Errata information


PlatformErrataRelease Date
Oracle Linux version 5 (kernel)ELSA-2014-07402014-06-11
Oracle Linux version 5 (kernel)ELSA-2014-0740-12014-06-11
Oracle Linux version 5 (kernel-uek)ELSA-2014-30422014-06-20
Oracle Linux version 5 (kernel-uek)ELSA-2014-30432014-06-20
Oracle Linux version 5 (mlnx_en-2.6.32-400.36.3.el5uek)ELSA-2014-30432014-06-20
Oracle Linux version 5 (ocfs2-2.6.18-371.9.1.0.1.el5)ELSA-2014-0740-12014-06-11
Oracle Linux version 5 (ocfs2-2.6.18-371.9.1.el5)ELSA-2014-07402014-06-11
Oracle Linux version 5 (ofa-2.6.32-400.36.3.el5uek)ELSA-2014-30432014-06-20
Oracle Linux version 5 (oracleasm-2.6.18-371.9.1.0.1.el5)ELSA-2014-0740-12014-06-11
Oracle Linux version 5 (oracleasm-2.6.18-371.9.1.el5)ELSA-2014-07402014-06-11
Oracle Linux version 6 (dtrace-modules-3.8.13-35.1.2.el6uek)ELSA-2014-30412014-06-20
Oracle Linux version 6 (kernel)ELSA-2014-07712014-06-19
Oracle Linux version 6 (kernel-uek)ELSA-2014-30412014-06-20
Oracle Linux version 6 (kernel-uek)ELSA-2014-30422014-06-20
Oracle Linux version 6 (kernel-uek)ELSA-2014-30432014-06-20
Oracle Linux version 6 (mlnx_en-2.6.32-400.36.3.el6uek)ELSA-2014-30432014-06-20
Oracle Linux version 6 (ofa-2.6.32-400.36.3.el6uek)ELSA-2014-30432014-06-20
Oracle Linux version 7 (kernel)ELSA-2014-07862014-07-23



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete