Vulnerability Description
The raw_cmd_copyout function in drivers/block/floppy.c in the Linux kernel through 3.14.3 does not properly restrict access to certain pointers during processing of an FDRAWCMD ioctl call, which allows local users to obtain sensitive information from kernel heap memory by leveraging write access to a /dev/fd device.
CVSS Score
LOW
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux Kernel | <= 3.14.3 |
| Redhat | Enterprise Linux Eus | 5.6 |
| Debian | Debian Linux | 6.0 |
| Oracle | Linux | 5 |
| Suse | Linux Enterprise Desktop | 11 |
| Suse | Linux Enterprise High Availability Extension | 11 |
| Suse | Linux Enterprise Real Time Extension | 11 |
| Suse | Linux Enterprise Server | 11 |
Related Weaknesses (CWE)
References
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=
- http://linux.oracle.com/errata/ELSA-2014-0771.html
- http://linux.oracle.com/errata/ELSA-2014-3043.html
- http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00012.html
- http://rhn.redhat.com/errata/RHSA-2014-0800.html
- http://rhn.redhat.com/errata/RHSA-2014-0801.html
- http://secunia.com/advisories/59262
- http://secunia.com/advisories/59309
- http://secunia.com/advisories/59406
- http://secunia.com/advisories/59599
- http://www.debian.org/security/2014/dsa-2926
- http://www.debian.org/security/2014/dsa-2928
- http://www.openwall.com/lists/oss-security/2014/05/09/2
- http://www.securityfocus.com/bid/67302
FAQ
What is CVE-2014-1738?
CVE-2014-1738 is a vulnerability with a CVSS score of 2.1 (LOW). The raw_cmd_copyout function in drivers/block/floppy.c in the Linux kernel through 3.14.3 does not properly restrict access to certain pointers during processing of an FDRAWCMD ioctl call, which allow...
How severe is CVE-2014-1738?
CVE-2014-1738 has been rated LOW with a CVSS base score of 2.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2014-1738?
Check the references section above for vendor advisories and patch information. Affected products include: Linux Linux Kernel, Redhat Enterprise Linux Eus, Debian Debian Linux, Oracle Linux, Suse Linux Enterprise Desktop.