CVE-2014-1446 in Linux Kernel
Résumé (Anglaise)
The yam_ioctl function in drivers/net/hamradio/yam.c in the Linux kernel before 3.12.8 does not initialize a certain structure member, which allows local users to obtain sensitive information from kernel memory by leveraging the CAP_NET_ADMIN capability for an SIOCYAMGCFG ioctl call.
Réserver
14/01/2014
Divulgation
18/01/2014
Entrées
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnérabilité | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 12073 | Linux Kernel yam.c yam_ioctl déni de service | 399 | Non défini | Correctif officiel | CVE-2014-1446 |