Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2014-0038
HistoryFeb 06, 2014 - 10:55 p.m.

CVE-2014-0038

2014-02-0622:55:03
CWE-20
[email protected]
web.nvd.nist.gov
103
cve-2014-0038
linux kernel
privilege escalation
recvmmsg
nvd

6.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

5.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.5%

JSON

The compat_sys_recvmmsg function in net/compat.c in the Linux kernel before 3.13.2, when CONFIG_X86_X32 is enabled, allows local users to gain privileges via a recvmmsg system call with a crafted timeout pointer parameter.

Affected configurations

NVD
Node
linuxlinux_kernelRange3.4–3.4.79
OR
linuxlinux_kernelRange3.5–3.10.29
OR
linuxlinux_kernelRange3.11–3.12.10
OR
linuxlinux_kernelRange3.13–3.13.2
Node
opensuseopensuseMatch12.3

References

Related

openvas 25
exploitpack 2
seebug 2
nessus 13
ubuntucve 1
ubuntu 3
kitploit 2
prion 1
cvelist 1
zdt 3
mageia 10
securityvulns 3
debiancve 1
canvas 1
packetstorm 2
nvd 1
hackerone 1
slackware 1
metasploit 1
exploitdb 3
suse 4
oraclelinux 1
openvas
openvas
Ubuntu Update for linux USN-2096-1
2014-02-03 00:00:00
Ubuntu Update for linux-lts-raring USN-2094-1
2014-02-03 00:00:00
Ubuntu: Security Advisory (USN-2094-1)
2014-02-03 00:00:00
exploitpack
exploitpack
Linux Kernel 3.4 3.13.2 (Ubuntu 13.10) - CONFIG_X86_X32 Arbitrary Write (2)
2014-02-02 00:00:00
Linux Kernel 3.4 3.13.2 (Ubuntu 13.0413.10 x64) - CONFIG_X86_X32y Local Privilege Escalation (3)
2014-02-02 00:00:00
seebug
seebug
linux 3.4+ - Local Root (CONFIG_X86_X32=y)
2014-07-01 00:00:00
Linux 3.4+ - Arbitrary write with CONFIG_X86_X32
2014-07-01 00:00:00
nessus
nessus
Ubuntu 12.04 LTS : linux-lts-raring vulnerability (USN-2094-1)
2014-01-31 00:00:00
Slackware 14.1 : kernel (SSA:2014-050-03)
2014-02-20 00:00:00
Ubuntu 13.10 : linux vulnerability (USN-2096-1)
2014-01-31 00:00:00
ubuntucve
ubuntucve
CVE-2014-0038
2014-01-30 00:00:00
ubuntu
ubuntu
Linux kernel vulnerability
2014-01-31 00:00:00
Linux kernel (Saucy HWE) vulnerability
2014-01-31 00:00:00
Linux kernel (Raring HWE) vulnerability
2014-01-31 00:00:00
kitploit
kitploit
Exploit Linux 3.4+ Arbitrary write with CONFIG_X86_X32
2014-02-04 19:07:00
Exploit Linux 3.4+ Local Root (CONFIG_X86_X32=y)
2014-02-04 19:10:00
prion
prion
Command injection
2014-02-06 22:55:00
cvelist
cvelist
CVE-2014-0038
2014-02-06 22:00:00
zdt
zdt
Linux kernel 3.4+ Arbitrary write with CONFIG_X86_X32
2014-02-02 00:00:00
Linux kernel 3.4+ local root (CONFIG_X86_X32=y)
2014-02-02 00:00:00
Linux Kernel 3.13.1 - 'Recvmmsg' Privilege Escalation (Metasploit)
2016-10-12 00:00:00
mageia
mageia
Updated kernel-linus package fixes security vulnerability
2014-02-12 21:17:13
Updated kernel-rt packages fix security vulnerability
2014-02-13 02:48:23
Updated kernel-tmb packages fix CVE-2014-0038
2014-02-11 00:13:44
securityvulns
securityvulns
[USN-2096-1] Linux kernel vulnerability
2014-02-01 00:00:00
[ MDVSA-2014:038 ] kernel
2014-02-18 00:00:00
Linux kernel security vulnerabilities
2014-03-31 00:00:00
debiancve
debiancve
CVE-2014-0038
2014-02-06 22:55:03
canvas
canvas
Immunity Canvas: RECVMMSG
2014-02-06 22:55:00
packetstorm
packetstorm
X86_X32 recvmmsg Arbitrary Write Local Root
2014-02-03 00:00:00
Linux Kernel 3.13.1 Recvmmsg Privilege Escalation
2016-10-10 00:00:00
nvd
nvd
CVE-2014-0038
2014-02-06 22:55:03
hackerone
hackerone
Sandbox Escape: Linux 3.4+: arbitrary write with CONFIG_X86_X32
2014-01-28 23:52:58
slackware
slackware
kernel
2014-02-19 20:29:09
metasploit
metasploit
Linux Kernel recvmmsg Privilege Escalation
2016-10-09 03:58:09
exploitdb
exploitdb
Linux Kernel 3.4 < 3.13.2 (Ubuntu 13.04/13.10 x64) - 'CONFIG_X86_X32=y' Local Privilege Escalation (3)
2014-02-02 00:00:00
Linux Kernel 3.13.1 - 'Recvmmsg' Local Privilege Escalation (Metasploit)
2016-10-11 00:00:00
Linux Kernel 3.4 < 3.13.2 (Ubuntu 13.10) - 'CONFIG_X86_X32' Arbitrary Write (2)
2014-02-02 00:00:00
suse
suse
kernel to 3.11.10 (important)
2014-02-06 19:21:55
Security update for the Linux Kernel (important)
2017-12-04 15:07:06
Security update for the Linux Kernel (important)
2017-12-08 18:11:43
oraclelinux
oraclelinux
Unbreakable Enterprise kernel security update
2014-05-19 00:00:00

6.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

5.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.5%

JSON
Related for CVE-2014-0038
openvas25exploitpack2seebug2nessus13ubuntucve1ubuntu3kitploit2prion1cvelist1zdt3mageia10securityvulns3debiancve1canvas1packetstorm2nvd1hackerone1slackware1metasploit1exploitdb3suse4oraclelinux1