CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:N/I:N/A:C
AI Score
Confidence
High
EPSS
Percentile
92.8%
An flaw was discovered in the Linux kernel’s audit subsystem when auditing
certain syscalls. A local attacker could exploit this flaw to obtain
potentially sensitive single-bit values from kernel memory or cause a
denial of service (OOPS). (CVE-2014-3917)
An information leak was discovered in the rd_mcp backend of the iSCSI
target subsystem in the Linux kernel. A local user could exploit this flaw
to obtain sensitive information from ramdisk_mcp memory by leveraging
access to a SCSI initiator. (CVE-2014-4027)
Sasha Levin reported an issue with the Linux kernel’s shared memory
subsystem when used with range notifications and hole punching. A local
user could exploit this flaw to cause a denial of service. (CVE-2014-4171)
An information leak was discovered in the control implemenation of the
Advanced Linux Sound Architecture (ALSA) subsystem in the Linux kernel. A
local user could exploit this flaw to obtain sensitive information from
kernel memory. (CVE-2014-4652)
A use-after-free flaw was discovered in the Advanced Linux Sound
Architecture (ALSA) control implementation of the Linux kernel. A local
user could exploit this flaw to cause a denial of service (system crash).
(CVE-2014-4653)
A authorization bug was discovered with the snd_ctl_elem_add function of
the Advanced Linux Sound Architecture (ALSA) in the Linux kernel. A local
user could exploit his bug to cause a denial of service (remove kernel
controls). (CVE-2014-4654)
A flaw discovered in how the snd_ctl_elem function of the Advanced Linux
Sound Architecture (ALSA) handled a reference count. A local user could
exploit this flaw to cause a denial of service (integer overflow and limit
bypass). (CVE-2014-4655)
An integer overflow flaw was discovered in the control implementation of
the Advanced Linux Sound Architecture (ALSA). A local user could exploit
this flaw to cause a denial of service (system crash). (CVE-2014-4656)
An integer underflow flaw was discovered in the Linux kernel’s handling of
the backlog value for certain SCTP packets. A remote attacker could exploit
this flaw to cause a denial of service (socket outage) via a crafted SCTP
packet. (CVE-2014-4667)
Jason Gunthorpe reported a flaw with SCTP authentication in the Linux
kernel. A remote attacker could exploit this flaw to cause a denial of
service (NULL pointer dereference and OOPS). (CVE-2014-5077)
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Ubuntu | 12.04 | noarch | linux-image-3.2.0-1452-omap4 | < 3.2.0-1452.72 | UNKNOWN |
Ubuntu | 12.04 | noarch | block-modules-3.2.0-1452-omap4-di | < 3.2.0-1452.72 | UNKNOWN |
Ubuntu | 12.04 | noarch | crypto-modules-3.2.0-1452-omap4-di | < 3.2.0-1452.72 | UNKNOWN |
Ubuntu | 12.04 | noarch | fat-modules-3.2.0-1452-omap4-di | < 3.2.0-1452.72 | UNKNOWN |
Ubuntu | 12.04 | noarch | fs-core-modules-3.2.0-1452-omap4-di | < 3.2.0-1452.72 | UNKNOWN |
Ubuntu | 12.04 | noarch | fs-secondary-modules-3.2.0-1452-omap4-di | < 3.2.0-1452.72 | UNKNOWN |
Ubuntu | 12.04 | noarch | input-modules-3.2.0-1452-omap4-di | < 3.2.0-1452.72 | UNKNOWN |
Ubuntu | 12.04 | noarch | irda-modules-3.2.0-1452-omap4-di | < 3.2.0-1452.72 | UNKNOWN |
Ubuntu | 12.04 | noarch | kernel-image-3.2.0-1452-omap4-di | < 3.2.0-1452.72 | UNKNOWN |
Ubuntu | 12.04 | noarch | linux-headers-3.2.0-1452 | < 3.2.0-1452.72 | UNKNOWN |
ubuntu.com/security/CVE-2014-3917
ubuntu.com/security/CVE-2014-4027
ubuntu.com/security/CVE-2014-4171
ubuntu.com/security/CVE-2014-4652
ubuntu.com/security/CVE-2014-4653
ubuntu.com/security/CVE-2014-4654
ubuntu.com/security/CVE-2014-4655
ubuntu.com/security/CVE-2014-4656
ubuntu.com/security/CVE-2014-4667
ubuntu.com/security/CVE-2014-5077