The cifs_iovec_write function in fs/cifs/file.c in the Linux kernel through 3.13.5 does not properly handle uncached write operations that copy fewer than the requested number of bytes, which allows local users to obtain sensitive information from kernel memory, cause a denial of service (memory corruption and system crash), or possibly gain privileges via a writev system call with a crafted pointer.
References
| Link | Resource |
|---|---|
| http://article.gmane.org/gmane.linux.kernel.cifs/9401 | Broken Link |
| http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=5d81de8e8667da7135d3a32a964087c0faf5483f | Broken Link |
| http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00026.html | Mailing List Third Party Advisory |
| http://rhn.redhat.com/errata/RHSA-2014-0328.html | Third Party Advisory |
| http://www.openwall.com/lists/oss-security/2014/02/17/4 | Mailing List Third Party Advisory |
| http://www.securityfocus.com/bid/65588 | Third Party Advisory VDB Entry |
| https://bugzilla.redhat.com/show_bug.cgi?id=1064253 | Issue Tracking Third Party Advisory |
| https://github.com/torvalds/linux/commit/5d81de8e8667da7135d3a32a964087c0faf5483f | Patch Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
History
No history.
Information
Published : 2014-02-28 06:18
Updated : 2024-07-10 15:28
NVD link : CVE-2014-0069
Mitre link : CVE-2014-0069
CVE.ORG link : CVE-2014-0069
JSON object : View
Products Affected
suse
- linux_enterprise_desktop
- linux_enterprise_server
redhat
- enterprise_linux_server
- enterprise_linux_server_aus
- enterprise_linux_desktop
- enterprise_linux_eus
- enterprise_linux_server_tus
- enterprise_linux_workstation
linux
- linux_kernel
CWE
CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer