Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2014-0038HistoryFeb 06, 2014 - 10:55 p.m.
CVE-2014-0038
2014-02-0622:55:03
Debian Security Bug Tracker
security-tracker.debian.org
16
6.9 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
0.001 Low
EPSS
Percentile
25.5%
The compat_sys_recvmmsg function in net/compat.c in the Linux kernel before 3.13.2, when CONFIG_X86_X32 is enabled, allows local users to gain privileges via a recvmmsg system call with a crafted timeout pointer parameter.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | linux | < 3.13.4-1 | linux_3.13.4-1_all.deb |
| Debian | 11 | all | linux | < 3.13.4-1 | linux_3.13.4-1_all.deb |
| Debian | 999 | all | linux | < 3.13.4-1 | linux_3.13.4-1_all.deb |
| Debian | 13 | all | linux | < 3.13.4-1 | linux_3.13.4-1_all.deb |
Related
openvas
openvas
Ubuntu: Security Advisory (USN-2094-1)
2014-02-03 00:00:00
Ubuntu: Security Advisory (USN-2095-1)
2014-02-03 00:00:00
Mageia: Security Advisory (MGASA-2014-0046)
2022-01-28 00:00:00
kitploit
kitploit
Exploit Linux 3.4+ Arbitrary write with CONFIG_X86_X32
2014-02-04 19:07:00
Exploit Linux 3.4+ Local Root (CONFIG_X86_X32=y)
2014-02-04 19:10:00
prion
prion
Command injection
2014-02-06 22:55:00
cvelist
cvelist
CVE-2014-0038
2014-02-06 22:00:00
zdt
zdt
Linux kernel 3.4+ Arbitrary write with CONFIG_X86_X32
2014-02-02 00:00:00
Linux kernel 3.4+ local root (CONFIG_X86_X32=y)
2014-02-02 00:00:00
Linux Kernel 3.13.1 - 'Recvmmsg' Privilege Escalation (Metasploit)
2016-10-12 00:00:00
mageia
mageia
Updated kernel-linus package fixes security vulnerability
2014-02-12 21:17:13
Updated kernel-rt packages fix security vulnerability
2014-02-13 02:48:23
Updated kernel-tmb packages fix CVE-2014-0038
2014-02-11 00:13:44
nessus
nessus
Slackware 14.1 : kernel (SSA:2014-050-03)
2014-02-20 00:00:00
Ubuntu 12.04 LTS : linux-lts-raring vulnerability (USN-2094-1)
2014-01-31 00:00:00
Ubuntu 13.10 : linux vulnerability (USN-2096-1)
2014-01-31 00:00:00
securityvulns
securityvulns
[USN-2096-1] Linux kernel vulnerability
2014-02-01 00:00:00
[ MDVSA-2014:038 ] kernel
2014-02-18 00:00:00
Linux kernel security vulnerabilities
2014-03-31 00:00:00
cve
cve
CVE-2014-0038
2014-02-06 22:55:03
ubuntucve
ubuntucve
CVE-2014-0038
2014-01-30 00:00:00
ubuntu
ubuntu
Linux kernel vulnerability
2014-01-31 00:00:00
Linux kernel (Saucy HWE) vulnerability
2014-01-31 00:00:00
Linux kernel (Raring HWE) vulnerability
2014-01-31 00:00:00
exploitpack
exploitpack
seebug
seebug
linux 3.4+ - Local Root (CONFIG_X86_X32=y)
2014-07-01 00:00:00
Linux 3.4+ - Arbitrary write with CONFIG_X86_X32
2014-07-01 00:00:00
canvas
canvas
Immunity Canvas: RECVMMSG
2014-02-06 22:55:00
packetstorm
packetstorm
X86_X32 recvmmsg Arbitrary Write Local Root
2014-02-03 00:00:00
Linux Kernel 3.13.1 Recvmmsg Privilege Escalation
2016-10-10 00:00:00
nvd
nvd
CVE-2014-0038
2014-02-06 22:55:03
hackerone
hackerone
Sandbox Escape: Linux 3.4+: arbitrary write with CONFIG_X86_X32
2014-01-28 23:52:58
slackware
slackware
kernel
2014-02-19 20:29:09
metasploit
metasploit
Linux Kernel recvmmsg Privilege Escalation
2016-10-09 03:58:09
exploitdb
exploitdb
suse
suse
kernel to 3.11.10 (important)
2014-02-06 19:21:55
Security update for the Linux Kernel (important)
2017-12-04 15:07:06
Security update for the Linux Kernel (important)
2017-12-08 18:11:43
oraclelinux
oraclelinux
Unbreakable Enterprise kernel security update
2014-05-19 00:00:00
6.9 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
0.001 Low
EPSS
Percentile
25.5%
Related for DEBIANCVE:CVE-2014-0038