CVE-2014-1738
Last modified
CVE-2014-1738 is a vulnerability of currently unknown severity. The raw_cmd_copyout function in drivers/block/floppy.c in the Linux kernel through 3.14.3 does not properly restrict access to certain pointers during processing of an FDRAWCMD ioctl call, which allows local users to obtain sensitive information from kernel heap memory by leveraging write access to a /dev/fd device.. EPSS estimates a 0.52% chance of exploitation in the next 30 days.
Description
The raw_cmd_copyout function in drivers/block/floppy.c in the Linux kernel through 3.14.3 does not properly restrict access to certain pointers during processing of an FDRAWCMD ioctl call, which allows local users to obtain sensitive information from kernel heap memory by leveraging write access to a /dev/fd device.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions | Update |
|---|---|---|---|
| Linux | Linux Kernel | <= 3.14.3 | — |
| Redhat | Enterprise Linux Eus | 5.6 | — |
| Redhat | Enterprise Linux Eus | 6.3 | — |
| Debian | Debian Linux | 6.0 | — |
| Debian | Debian Linux | 7.0 | — |
| Oracle | Linux | 5 | — |
| Oracle | Linux | 6 | — |
| Suse | Linux Enterprise Desktop | 11 | Sp3 |
| Suse | Linux Enterprise High Availability Extension | 11 | Sp3 |
| Suse | Linux Enterprise Real Time Extension | 11 | Sp3 |
| Suse | Linux Enterprise Server | 11 | Sp3 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2014-1738?
How severe is CVE-2014-1738?
How do I fix CVE-2014-1738?
Are you affected by CVE-2014-1738?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST