6.9

CVE-2014-8159

The InfiniBand (IB) implementation in the Linux kernel package before 2.6.32-504.12.2 on Red Hat Enterprise Linux (RHEL) 6 does not properly restrict use of User Verbs for registration of memory regions, which allows local users to access arbitrary physical memory locations, and consequently cause a denial of service (system crash) or gain privileges, by leveraging permissions on a uverbs device under /dev/infiniband/.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 2.6.12 < 3.2.69
Linux ≫ Linux Kernel Version >= 3.3 < 3.4.108
Linux ≫ Linux Kernel Version >= 3.5 < 3.10.75
Linux ≫ Linux Kernel Version >= 3.11 < 3.12.41
Linux ≫ Linux Kernel Version >= 3.13 < 3.14.39
Linux ≫ Linux Kernel Version >= 3.15 < 3.16.35
Linux ≫ Linux Kernel Version >= 3.17 < 3.18.13
Linux ≫ Linux Kernel Version >= 3.19 < 3.19.5
Canonical ≫ Ubuntu Linux Version10.04 SwEdition-
Canonical ≫ Ubuntu Linux Version12.04 SwEdition-
Canonical ≫ Ubuntu Linux Version14.04 SwEditionesm
Canonical ≫ Ubuntu Linux Version14.10
Debian ≫ Debian Linux Version7.0
Debian ≫ Debian Linux Version8.0
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.44% 0.35
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.9 3.4 10
AV:L/AC:M/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-0695.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-0782.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-0803.html
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00004.html
Third Party Advisory
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00009.html
Third Party Advisory
Mailing List
http://rhn.redhat.com/errata/RHSA-2015-0674.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-0783.html
Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152747.html
Third Party Advisory
Mailing List
http://www.debian.org/security/2015/dsa-3237
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00008.html
Third Party Advisory
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00007.html
Third Party Advisory
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00011.html
Third Party Advisory
Mailing List
http://rhn.redhat.com/errata/RHSA-2015-0726.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-0751.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-0870.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-0919.html
Third Party Advisory
http://www.securityfocus.com/bid/73060
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1032224
Third Party Advisory
VDB Entry
http://www.ubuntu.com/usn/USN-2525-1
Third Party Advisory
http://www.ubuntu.com/usn/USN-2526-1
Third Party Advisory
http://www.ubuntu.com/usn/USN-2527-1
Third Party Advisory
http://www.ubuntu.com/usn/USN-2528-1
Third Party Advisory
http://www.ubuntu.com/usn/USN-2529-1
Third Party Advisory
http://www.ubuntu.com/usn/USN-2530-1
Third Party Advisory
http://www.ubuntu.com/usn/USN-2561-1
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1181166
Third Party Advisory
Issue Tracking