6.9

CVE-2014-8159

EPSS 0.08%
Published 16.03.2015 10:59:01
Last modified 12.04.2025 10:46:40
Source secalert@redhat.com
Teams watchlist Login
Open Login

The InfiniBand (IB) implementation in the Linux kernel package before 2.6.32-504.12.2 on Red Hat Enterprise Linux (RHEL) 6 does not properly restrict use of User Verbs for registration of memory regions, which allows local users to access arbitrary physical memory locations, and consequently cause a denial of service (system crash) or gain privileges, by leveraging permissions on a uverbs device under /dev/infiniband/.

Affected products Warnungen 0 Metrics 2 CWE 0 References 30

Data is provided by the National Vulnerability Database (NVD)

Linux ≫ Linux Kernel Version >= 2.6.12 < 3.2.69

Linux ≫ Linux Kernel Version >= 3.3 < 3.4.108

Linux ≫ Linux Kernel Version >= 3.5 < 3.10.75

Linux ≫ Linux Kernel Version >= 3.11 < 3.12.41

Linux ≫ Linux Kernel Version >= 3.13 < 3.14.39

Linux ≫ Linux Kernel Version >= 3.15 < 3.16.35

Linux ≫ Linux Kernel Version >= 3.17 < 3.18.13

Linux ≫ Linux Kernel Version >= 3.19 < 3.19.5

Canonical ≫ Ubuntu Linux Version10.04 SwEdition-

Canonical ≫ Ubuntu Linux Version12.04 SwEdition-

Canonical ≫ Ubuntu Linux Version14.04 SwEditionesm

Canonical ≫ Ubuntu Linux Version14.10

Debian ≫ Debian Linux Version7.0

Debian ≫ Debian Linux Version8.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.08%	0.236

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	6.9	3.4	10	AV:L/AC:M/Au:N/C:C/I:C/A:C

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2015-0695.html

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2015-0782.html

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2015-0803.html

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00004.html

Third Party Advisory

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00009.html

Third Party Advisory

Mailing List

http://rhn.redhat.com/errata/RHSA-2015-0674.html

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2015-0783.html

Third Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152747.html

Third Party Advisory

Mailing List

http://www.debian.org/security/2015/dsa-3237

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00008.html

Third Party Advisory

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00007.html

Third Party Advisory

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00011.html

Third Party Advisory

Mailing List

http://rhn.redhat.com/errata/RHSA-2015-0726.html

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2015-0751.html

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2015-0870.html

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2015-0919.html

Third Party Advisory

http://www.securityfocus.com/bid/73060

Third Party Advisory

VDB Entry

http://www.securitytracker.com/id/1032224

Third Party Advisory

VDB Entry

http://www.ubuntu.com/usn/USN-2525-1

Third Party Advisory

http://www.ubuntu.com/usn/USN-2526-1

Third Party Advisory

http://www.ubuntu.com/usn/USN-2527-1

Third Party Advisory

http://www.ubuntu.com/usn/USN-2528-1

Third Party Advisory

http://www.ubuntu.com/usn/USN-2529-1

Third Party Advisory

http://www.ubuntu.com/usn/USN-2530-1

Third Party Advisory

http://www.ubuntu.com/usn/USN-2561-1

Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=1181166

Third Party Advisory

Issue Tracking

https://nvd.nist.gov/vuln/detail/CVE-2014-8159

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2014-8159

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2014-8159

EUVD