Home

CVE-2014-0069

Description

The cifs_iovec_write function in fs/cifs/file.c in the Linux kernel through 3.13.5 does not properly handle uncached write operations that copy fewer than the requested number of bytes, which allows local users to obtain sensitive information from kernel memory, cause a denial of service (memory corruption and system crash), or possibly gain privileges via a writev system call with a crafted pointer.

Risk Information

Base Score
8.6
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C
EPSS Score
Exploitation Probability
0.049

Associated Vulnerability

VulnerabilityOS Platform
Linux hardware enablement kernel from Quantal (USN-2175-1) linux-image-3.5.0-49-generic_3.5.0-49.74~precise1_i386.debLinux
Linux hardware enablement kernel from Quantal (USN-2175-1) linux-image-3.5.0-49-generic_3.5.0-49.74~precise1_amd64.debLinux
Linux hardware enablement kernel from Raring (USN-2176-1) linux-image-3.8.0-39-generic_3.8.0-39.58~precise1_i386.debLinux
Linux hardware enablement kernel from Raring (USN-2176-1) linux-image-3.8.0-39-generic_3.8.0-39.58~precise1_amd64.debLinux
Linux hardware enablement kernel from Saucy (USN-2177-1) linux-image-3.11.0-20-generic_3.11.0-20.35~precise1_i386.debLinux
Linux hardware enablement kernel from Saucy (USN-2177-1) linux-image-3.11.0-20-generic_3.11.0-20.35~precise1_amd64.debLinux
Linux kernel (USN-2221-1) linux-image-3.2.0-63-generic_3.2.0-63.95_i386.debLinux
Linux kernel (USN-2221-1) linux-image-3.2.0-63-generic_3.2.0-63.95_amd64.debLinux
Linux kernel (USN-2221-1) linux-image-3.2.0-63-virtual_3.2.0-63.95_i386.debLinux
Linux kernel (USN-2221-1) linux-image-3.2.0-63-virtual_3.2.0-63.95_amd64.debLinux
Linux kernel (USN-2221-1) linux-image-3.2.0-63-generic-pae_3.2.0-63.95_i386.debLinux
Dtrace-modules-3.8.13-26.2.2.el6uek update (ELSA-2014-3014) dtrace-modules-3.8.13-26.2.2.el6uek-0.4.2-3.el6.x86_64.rpmLinux
Dtrace-modules-3.8.13-35.el6uek update (ELSA-2014-3034) dtrace-modules-3.8.13-35.el6uek-0.4.3-4.el6.x86_64.rpmLinux
Dtrace-modules-headers update (ELSA-2014-3034) dtrace-modules-headers-0.4.3-4.el6.x86_64.rpmLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234