CVE-2014-8171

Description

The memory resource controller (aka memcg) in the Linux kernel allows local users to cause a denial of service (deadlock) by spawning new processes within a memory-constrained cgroup.

Risk Information

Base Score
5.5
MODERATE
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
0.049

Associated Vulnerability

VulnerabilityOS Platform
Dtrace-modules-3.8.13-68.1.3.el6uek update (ELSA-2015-3032) dtrace-modules-3.8.13-68.1.3.el6uek-0.4.3-4.el6.x86_64.rpmLinux
Dtrace-modules-3.8.13-68.1.3.el7uek update (ELSA-2015-3032) dtrace-modules-3.8.13-68.1.3.el7uek-0.4.3-4.el7.x86_64.rpmLinux
Dtrace-modules-3.8.13-68.2.2.el6uek update (ELSA-2015-3035) dtrace-modules-3.8.13-68.2.2.el6uek-0.4.3-4.el6.x86_64.rpmLinux
Dtrace-modules-3.8.13-68.2.2.el7uek update (ELSA-2015-3035) dtrace-modules-3.8.13-68.2.2.el7uek-0.4.3-4.el7.x86_64.rpmLinux
Dtrace-modules-3.8.13-98.el6uek update (ELSA-2015-3064) dtrace-modules-3.8.13-98.el6uek-0.4.5-2.el6.x86_64.rpmLinux
Dtrace-modules-3.8.13-98.el7uek update (ELSA-2015-3064) dtrace-modules-3.8.13-98.el7uek-0.4.5-3.el7.x86_64.rpmLinux
CVE-2014-8171NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234