CVE-2014-1737
Last modified
CVE-2014-1737 is a vulnerability of currently unknown severity. The raw_cmd_copyin function in drivers/block/floppy.c in the Linux kernel through 3.14.3 does not properly handle error conditions during processing of an FDRAWCMD ioctl call, which allows local users to trigger kfree operations and gain privileges by leveraging write access to a /dev/fd device.. EPSS estimates a 0.49% chance of exploitation in the next 30 days.
Description
The raw_cmd_copyin function in drivers/block/floppy.c in the Linux kernel through 3.14.3 does not properly handle error conditions during processing of an FDRAWCMD ioctl call, which allows local users to trigger kfree operations and gain privileges by leveraging write access to a /dev/fd device.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions | Update |
|---|---|---|---|
| Linux | Linux Kernel | < 3.2.59 | — |
| Linux | Linux Kernel | >= 3.3, < 3.4.90 | — |
| Linux | Linux Kernel | >= 3.5, < 3.10.40 | — |
| Linux | Linux Kernel | >= 3.11, < 3.12.20 | — |
| Linux | Linux Kernel | >= 3.13, < 3.14.4 | — |
| Oracle | Linux | 5 | — |
| Oracle | Linux | 6 | — |
| Debian | Debian Linux | 6.0 | — |
| Debian | Debian Linux | 7.0 | — |
| Suse | Linux Enterprise Desktop | 11 | Sp3 |
| Suse | Linux Enterprise High Availability Extension | 11 | Sp3 |
| Suse | Linux Enterprise Real Time Extension | 11 | Sp3 |
| Suse | Linux Enterprise Server | 11 | Sp3 |
| Redhat | Enterprise Linux Eus | 5.6 | — |
| Redhat | Enterprise Linux Eus | 6.3 | — |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2014-1737?
How severe is CVE-2014-1737?
How do I fix CVE-2014-1737?
Are you affected by CVE-2014-1737?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST