CVE-2014-0069 in Linux Kernel
要約 (英語)
The cifs_iovec_write function in fs/cifs/file.c in the Linux kernel through 3.13.5 does not properly handle uncached write operations that copy fewer than the requested number of bytes, which allows local users to obtain sensitive information from kernel memory, cause a denial of service (memory corruption and system crash), or possibly gain privileges via a writev system call with a crafted pointer.
予約する
2013年12月03日
公開
2014年02月28日
エントリ
VulDB provides additional information and datapoints for this CVE:
| 識別子 | 脆弱性 | CWE | 悪用可 | 対策 | CVE |
|---|---|---|---|---|---|
| 12372 | Linux Kernel file.c cifs_iovec_write メモリ破損 | 119 | 未実証 | 公式な修正 | CVE-2014-0069 |