[Forgot Password]
Login  Register Subscribe

30389

 
 

423868

 
 

244625

 
 

909

 
 

193379

 
 

277

Paid content will be excluded from the download.


Download | Alert*
OVAL

ELSA-2014-3041 -- Oracle kernel-uek and dtrace-modules

ID: oval:org.secpod.oval:def:1500602Date: (C)2014-07-20   (M)2024-03-25
Class: PATCHFamily: unix




The raw_cmd_copyin function in drivers/block/floppy.c in the Linux kernel through 3.14.3 does not properly handle error conditions during processing of an FDRAWCMD ioctl call, which allows local users to trigger kfree operations and gain privileges by leveraging write access to a /dev/fd device.

Platform:
Oracle Linux 6
Product:
kernel-uek
dtrace-modules 3.x
Reference:
ELSA-2014-3041
CVE-2014-1738
CVE-2014-1737
CVE    2
CVE-2014-1737
CVE-2014-1738
CPE    3
cpe:/o:oracle:linux:6
cpe:/a:dtrace-modules:dtrace-modules
cpe:/o:oracle:kernel-uek

© SecPod Technologies