CVE-2014-0069

The cifs_iovec_write function in fs/cifs/file.c in the Linux kernel through 3.13.5 does not properly handle uncached write operations that copy fewer than the requested number of bytes, which allows local users to obtain sensitive information from kernel memory, cause a denial of service (memory corruption and system crash), or possibly gain privileges via a writev system call with a crafted pointer.

• CWE-119

• http://article.gmane.org/gmane.linux.kernel.cifs/9401Broken Link
• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=5d81de8e8667da7135d3a32a964087c0faf5483fBroken Link
• http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00026.htmlMailing List, Third Party Advisory
• http://rhn.redhat.com/errata/RHSA-2014-0328.htmlThird Party Advisory
• http://www.openwall.com/lists/oss-security/2014/02/17/4Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/65588Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=1064253Issue Tracking, Third Party Advisory
• https://github.com/torvalds/linux/commit/5d81de8e8667da7135d3a32a964087c0faf5483fPatch, Third Party Advisory
• http://article.gmane.org/gmane.linux.kernel.cifs/9401Broken Link
• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=5d81de8e8667da7135d3a32a964087c0faf5483fBroken Link
• http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00026.htmlMailing List, Third Party Advisory
• http://rhn.redhat.com/errata/RHSA-2014-0328.htmlThird Party Advisory
• http://www.openwall.com/lists/oss-security/2014/02/17/4Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/65588Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=1064253Issue Tracking, Third Party Advisory
• https://github.com/torvalds/linux/commit/5d81de8e8667da7135d3a32a964087c0faf5483fPatch, Third Party Advisory

Published

Feb 28, 2014

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-0063Multiple stack-based buffer overflows in PostgreSQL before 8…
• CVE-2014-0064Multiple integer overflows in the path_in and other unspecif…
• CVE-2014-0065Multiple buffer overflows in PostgreSQL before 8.4.20, 9.0.x…
• CVE-2014-0066The chkpass extension in PostgreSQL before 8.4.20, 9.0.x bef…
• CVE-2014-0067The "make check" command for the test suites in PostgreSQL 9…
• CVE-2014-0068It was reported that watchman in openshift node-utils create…5.5
• CVE-2014-0070Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2014-0071PackStack in Red Hat OpenStack 4.0 does not enforce the defa…
• CVE-2014-0072ios/CDVFileTransfer.m in the Apache Cordova File-Transfer st…
• CVE-2014-0073The CDVInAppBrowser class in the Apache Cordova In-App-Brows…
• CVE-2014-0074Apache Shiro 1.x before 1.2.3, when using an LDAP server wit…
• CVE-2014-0075Integer overflow in the parseChunkHeader function in java/or…