CVE-2014-4652 in Linux信息

摘要

由 MITRE

Race condition in the tlv handler functionality in the snd_ctl_elem_user_tlv function in sound/core/control.c in the ALSA control implementation in the Linux kernel before 3.15.2 allows local users to obtain sensitive information from kernel memory by leveraging /dev/snd/controlCX access.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

预定

2014-06-25

披露

2014-07-03

管理

已接受

条目

VDB-67043

CPE

准备好

CWE

CWE-362 (已确认)

CVSS

4.7 (NVD)

EPSS

0.00335

KEV

否

活动

非常低

部门

Hospital, Lawfirm, ...

来源

MITRE	https://www.cve.org/CVERecord?id=CVE-2014-4652
NVD	https://nvd.nist.gov/vuln/detail/CVE-2014-4652
CVE Details	https://www.cvedetails.com/cve/CVE-2014-4652/

◂ 上一步一览下一步 ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!