Lucene search

K
prionPRIOn knowledge basePRION:CVE-2014-4027
HistoryJun 23, 2014 - 11:21 a.m.

Design/Logic Flaw

2014-06-2311:21:00
PRIOn knowledge base
www.prio-n.com
5

5.9 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

10.3%

The rd_build_device_space function in drivers/target/target_core_rd.c in the Linux kernel before 3.14 does not properly initialize a certain data structure, which allows local users to obtain sensitive information from ramdisk_mcp memory by leveraging access to a SCSI initiator.

5.9 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

10.3%