Vulnerability-Lookup

CVE-2014-3611 (GCVE-0-2014-3611)

Vulnerability from cvelistv5 – Published: 2014-11-10 11:00 – Updated: 2024-08-06 10:50

Summary

Race condition in the __kvm_migrate_pit_timer function in arch/x86/kvm/i8254.c in the KVM subsystem in the Linux kernel through 3.17.2 allows guest OS users to cause a denial of service (host OS crash) by leveraging incorrect PIT emulation.

Severity

4.7 (Medium)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE

Assigner

redhat redhat root

References

12 references

URL	Tags
http://git.kernel.org/?p=linux/kernel/git/torvald…	x_refsource_CONFIRM
http://www.ubuntu.com/usn/USN-2491-1	vendor-advisoryx_refsource_UBUNTU
http://www.ubuntu.com/usn/USN-2418-1	vendor-advisoryx_refsource_UBUNTU
http://www.ubuntu.com/usn/USN-2417-1	vendor-advisoryx_refsource_UBUNTU
http://www.debian.org/security/2014/dsa-3060	vendor-advisoryx_refsource_DEBIAN
https://bugzilla.redhat.com/show_bug.cgi?id=1144878	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2015-0869.html	vendor-advisoryx_refsource_REDHAT
https://github.com/torvalds/linux/commit/2febc839…	x_refsource_CONFIRM
http://www.ubuntu.com/usn/USN-2394-1	vendor-advisoryx_refsource_UBUNTU
http://rhn.redhat.com/errata/RHSA-2015-0284.html	vendor-advisoryx_refsource_REDHAT
http://www.openwall.com/lists/oss-security/2014/10/24/9	mailing-listx_refsource_MLIST
http://rhn.redhat.com/errata/RHSA-2015-0126.html	vendor-advisoryx_refsource_REDHAT

Date Public

2014-10-24 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T10:50:17.593Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=2febc839133280d5a5e8e1179c94ea674489dae2"
          },
          {
            "name": "USN-2491-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2491-1"
          },
          {
            "name": "USN-2418-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2418-1"
          },
          {
            "name": "USN-2417-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2417-1"
          },
          {
            "name": "DSA-3060",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-3060"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1144878"
          },
          {
            "name": "RHSA-2015:0869",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0869.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/2febc839133280d5a5e8e1179c94ea674489dae2"
          },
          {
            "name": "USN-2394-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2394-1"
          },
          {
            "name": "RHSA-2015:0284",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0284.html"
          },
          {
            "name": "[oss-security] 20141024 kvm issues",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2014/10/24/9"
          },
          {
            "name": "RHSA-2015:0126",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0126.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-10-24T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Race condition in the __kvm_migrate_pit_timer function in arch/x86/kvm/i8254.c in the KVM subsystem in the Linux kernel through 3.17.2 allows guest OS users to cause a denial of service (host OS crash) by leveraging incorrect PIT emulation."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-12-30T16:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=2febc839133280d5a5e8e1179c94ea674489dae2"
        },
        {
          "name": "USN-2491-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2491-1"
        },
        {
          "name": "USN-2418-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2418-1"
        },
        {
          "name": "USN-2417-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2417-1"
        },
        {
          "name": "DSA-3060",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-3060"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1144878"
        },
        {
          "name": "RHSA-2015:0869",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0869.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/torvalds/linux/commit/2febc839133280d5a5e8e1179c94ea674489dae2"
        },
        {
          "name": "USN-2394-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2394-1"
        },
        {
          "name": "RHSA-2015:0284",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0284.html"
        },
        {
          "name": "[oss-security] 20141024 kvm issues",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2014/10/24/9"
        },
        {
          "name": "RHSA-2015:0126",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0126.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2014-3611",
    "datePublished": "2014-11-10T11:00:00.000Z",
    "dateReserved": "2014-05-14T00:00:00.000Z",
    "dateUpdated": "2024-08-06T10:50:17.593Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2014-3611",
      "date": "2026-09-25",
      "epss": "0.00294",
      "percentile": "0.19672"
    },
    "fkie_nvd": {
      "configurations": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "matchCriteriaId": "D5362594-2AE6-4AFD-A1FB-FCB55482F71E",
                  "versionEndIncluding": "3.17.2",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        },
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*",
                  "matchCriteriaId": "1D8B549B-E57B-4DFE-8A13-CAB06B5356B3",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        },
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*",
                  "matchCriteriaId": "01EDA41C-6B2E-49AF-B503-EB3882265C11",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*",
                  "matchCriteriaId": "8D305F7A-D159-4716-AB26-5E38BB5CD991",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        },
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
                  "matchCriteriaId": "16F59A04-14CF-49E2-9973-645477EA09DA",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Race condition in the __kvm_migrate_pit_timer function in arch/x86/kvm/i8254.c in the KVM subsystem in the Linux kernel through 3.17.2 allows guest OS users to cause a denial of service (host OS crash) by leveraging incorrect PIT emulation."
        },
        {
          "lang": "es",
          "value": "Condici\u00f3n de carrera en la funci\u00f3n __kvm_migrate_pit_timer en arch/x86/kvm/i8254.c en el subsistema KVM en el kernel de Linux hasta 3.17.2 permite a usuarios del sistema operativo invitado causar una denegaci\u00f3n de servicio (ca\u00edda del sistema operativo anfitri\u00f3n) mediante el aprovechamiento de la emulaci\u00f3n PIT incorrecta."
        }
      ],
      "id": "CVE-2014-3611",
      "lastModified": "2024-11-21T02:08:30.060",
      "metrics": {
        "cvssMetricV2": [
          {
            "acInsufInfo": false,
            "baseSeverity": "MEDIUM",
            "cvssData": {
              "accessComplexity": "MEDIUM",
              "accessVector": "LOCAL",
              "authentication": "NONE",
              "availabilityImpact": "COMPLETE",
              "baseScore": 4.7,
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "vectorString": "AV:L/AC:M/Au:N/C:N/I:N/A:C",
              "version": "2.0"
            },
            "exploitabilityScore": 3.4,
            "impactScore": 6.9,
            "obtainAllPrivilege": false,
            "obtainOtherPrivilege": false,
            "obtainUserPrivilege": false,
            "source": "nvd@nist.gov",
            "type": "Primary",
            "userInteractionRequired": false
          }
        ],
        "cvssMetricV31": [
          {
            "cvssData": {
              "attackComplexity": "HIGH",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 4.7,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            },
            "exploitabilityScore": 1.0,
            "impactScore": 3.6,
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      },
      "published": "2014-11-10T11:55:06.393",
      "references": [
        {
          "source": "secalert@redhat.com",
          "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=2febc839133280d5a5e8e1179c94ea674489dae2"
        },
        {
          "source": "secalert@redhat.com",
          "tags": [
            "Third Party Advisory"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0126.html"
        },
        {
          "source": "secalert@redhat.com",
          "tags": [
            "Third Party Advisory"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0284.html"
        },
        {
          "source": "secalert@redhat.com",
          "tags": [
            "Third Party Advisory"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0869.html"
        },
        {
          "source": "secalert@redhat.com",
          "tags": [
            "Third Party Advisory"
          ],
          "url": "http://www.debian.org/security/2014/dsa-3060"
        },
        {
          "source": "secalert@redhat.com",
          "tags": [
            "Mailing List",
            "Patch",
            "Third Party Advisory"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2014/10/24/9"
        },
        {
          "source": "secalert@redhat.com",
          "tags": [
            "Third Party Advisory"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2394-1"
        },
        {
          "source": "secalert@redhat.com",
          "tags": [
            "Third Party Advisory"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2417-1"
        },
        {
          "source": "secalert@redhat.com",
          "tags": [
            "Third Party Advisory"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2418-1"
        },
        {
          "source": "secalert@redhat.com",
          "tags": [
            "Third Party Advisory"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2491-1"
        },
        {
          "source": "secalert@redhat.com",
          "tags": [
            "Issue Tracking",
            "Patch",
            "Third Party Advisory"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1144878"
        },
        {
          "source": "secalert@redhat.com",
          "tags": [
            "Patch",
            "Third Party Advisory"
          ],
          "url": "https://github.com/torvalds/linux/commit/2febc839133280d5a5e8e1179c94ea674489dae2"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=2febc839133280d5a5e8e1179c94ea674489dae2"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Third Party Advisory"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0126.html"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Third Party Advisory"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0284.html"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Third Party Advisory"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0869.html"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Third Party Advisory"
          ],
          "url": "http://www.debian.org/security/2014/dsa-3060"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Mailing List",
            "Patch",
            "Third Party Advisory"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2014/10/24/9"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Third Party Advisory"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2394-1"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Third Party Advisory"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2417-1"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Third Party Advisory"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2418-1"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Third Party Advisory"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2491-1"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Issue Tracking",
            "Patch",
            "Third Party Advisory"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1144878"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Patch",
            "Third Party Advisory"
          ],
          "url": "https://github.com/torvalds/linux/commit/2febc839133280d5a5e8e1179c94ea674489dae2"
        }
      ],
      "sourceIdentifier": "secalert@redhat.com",
      "vulnStatus": "Modified",
      "weaknesses": [
        {
          "description": [
            {
              "lang": "en",
              "value": "CWE-362"
            }
          ],
          "source": "nvd@nist.gov",
          "type": "Primary"
        }
      ]
    },
    "nvd": {
      "cve": {
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "D5362594-2AE6-4AFD-A1FB-FCB55482F71E",
                    "versionEndIncluding": "3.17.2",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "1D8B549B-E57B-4DFE-8A13-CAB06B5356B3",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*",
                    "matchCriteriaId": "01EDA41C-6B2E-49AF-B503-EB3882265C11",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*",
                    "matchCriteriaId": "8D305F7A-D159-4716-AB26-5E38BB5CD991",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "16F59A04-14CF-49E2-9973-645477EA09DA",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "Race condition in the __kvm_migrate_pit_timer function in arch/x86/kvm/i8254.c in the KVM subsystem in the Linux kernel through 3.17.2 allows guest OS users to cause a denial of service (host OS crash) by leveraging incorrect PIT emulation."
          },
          {
            "lang": "es",
            "value": "Condici\u00f3n de carrera en la funci\u00f3n __kvm_migrate_pit_timer en arch/x86/kvm/i8254.c en el subsistema KVM en el kernel de Linux hasta 3.17.2 permite a usuarios del sistema operativo invitado causar una denegaci\u00f3n de servicio (ca\u00edda del sistema operativo anfitri\u00f3n) mediante el aprovechamiento de la emulaci\u00f3n PIT incorrecta."
          }
        ],
        "id": "CVE-2014-3611",
        "lastModified": "2026-05-06T22:30:45.220",
        "metrics": {
          "cvssMetricV2": [
            {
              "acInsufInfo": false,
              "baseSeverity": "MEDIUM",
              "cvssData": {
                "accessComplexity": "MEDIUM",
                "accessVector": "LOCAL",
                "authentication": "NONE",
                "availabilityImpact": "COMPLETE",
                "baseScore": 4.7,
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "vectorString": "AV:L/AC:M/Au:N/C:N/I:N/A:C",
                "version": "2.0"
              },
              "exploitabilityScore": 3.4,
              "impactScore": 6.9,
              "obtainAllPrivilege": false,
              "obtainOtherPrivilege": false,
              "obtainUserPrivilege": false,
              "source": "nvd@nist.gov",
              "type": "Primary",
              "userInteractionRequired": false
            }
          ],
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "HIGH",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 4.7,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 1.0,
              "impactScore": 3.6,
              "source": "nvd@nist.gov",
              "type": "Primary"
            }
          ]
        },
        "published": "2014-11-10T11:55:06.393",
        "references": [
          {
            "source": "secalert@redhat.com",
            "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=2febc839133280d5a5e8e1179c94ea674489dae2"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0126.html"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0284.html"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0869.html"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "http://www.debian.org/security/2014/dsa-3060"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Mailing List",
              "Patch",
              "Third Party Advisory"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2014/10/24/9"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2394-1"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2417-1"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2418-1"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2491-1"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Issue Tracking",
              "Patch",
              "Third Party Advisory"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1144878"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Patch",
              "Third Party Advisory"
            ],
            "url": "https://github.com/torvalds/linux/commit/2febc839133280d5a5e8e1179c94ea674489dae2"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=2febc839133280d5a5e8e1179c94ea674489dae2"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0126.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0284.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0869.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "http://www.debian.org/security/2014/dsa-3060"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Mailing List",
              "Patch",
              "Third Party Advisory"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2014/10/24/9"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2394-1"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2417-1"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2418-1"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2491-1"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Issue Tracking",
              "Patch",
              "Third Party Advisory"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1144878"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Patch",
              "Third Party Advisory"
            ],
            "url": "https://github.com/torvalds/linux/commit/2febc839133280d5a5e8e1179c94ea674489dae2"
          }
        ],
        "sourceIdentifier": "secalert@redhat.com",
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-362"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    },
    "redhat_vex": {
      "aggregate_severity": "Important",
      "current_release_date": "2026-06-27T10:39:53+00:00",
      "cve": "CVE-2014-3611",
      "id": "CVE-2014-3611",
      "initial_release_date": "2014-10-21T00:00:00+00:00",
      "product_status:fixed": "433",
      "product_status:known_affected": "1",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: kvm: PIT timer race condition",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2014/cve-2014-3611.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-09-02T09:02:05Z",
      "cve": "CVE-2014-3611",
      "id": "CVE-2014-3611",
      "initial_release_date": "2023-02-15T05:28:34Z",
      "product_status:known_not_affected": "288",
      "product_status:recommended": "179",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2014-3611",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2014-3611.json",
      "version": "20"
    }
  }
}

CERTFR-2014-AVI-456

Vulnerability from certfr_avis - Published: - Updated:

De multiples vulnérabilités ont été corrigées dans le noyau Linux Ubuntu. Elles permettent à un attaquant de provoquer un déni de service à distance.

Contournement provisoire

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

	Vendor	Product	Description
	Ubuntu	Ubuntu	Ubuntu 12.04 LTS
	Ubuntu	Ubuntu	Ubuntu 14.04 LTS

References

Title

Publication Time

Tags

Bulletin de sécurité Ubuntu du 30 octobre 2014

None

vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Ubuntu 12.04 LTS",
      "product": {
        "name": "Ubuntu",
        "vendor": {
          "name": "Ubuntu",
          "scada": false
        }
      }
    },
    {
      "description": "Ubuntu 14.04 LTS",
      "product": {
        "name": "Ubuntu",
        "vendor": {
          "name": "Ubuntu",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Contournement provisoire\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2014-3647",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-3647"
    },
    {
      "name": "CVE-2014-7145",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-7145"
    },
    {
      "name": "CVE-2014-3611",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-3611"
    },
    {
      "name": "CVE-2014-3610",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-3610"
    },
    {
      "name": "CVE-2014-3646",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-3646"
    }
  ],
  "links": [],
  "reference": "CERTFR-2014-AVI-456",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2014-10-31T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003ele noyau Linux Ubuntu\u003c/span\u003e. Elles permettent \u00e0 un\nattaquant de provoquer un d\u00e9ni de service \u00e0 distance.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans le noyau Linux Ubuntu",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu du 30 octobre 2014",
      "url": "http://www.ubuntu.com/usn/usn-2395-1/"
    }
  ]
}

CERTFR-2014-AVI-459

Vulnerability from certfr_avis - Published: - Updated:

De multiples vulnérabilités ont été corrigées dans le noyau linux de Debian. Elles permettent à un attaquant de provoquer un déni de service à distance.

Contournement provisoire

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Debian Wheezy (version du noyau inférieure à 3.2.63-2+deb7u1

Impacted products

	Vendor	Product	Description

References

Title

Publication Time

Tags

Bulletin de sécurité Debian du 31 octobre 2014	None	vendor-advisory
Bulletin de sécurité Debian DSA-3060-1 du 31 octobre 2014	-	other

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [],
  "affected_systems_content": "\u003cP\u003eDebian Wheezy (version du noyau inf\u00e9rieure \u00e0  3.2.63-2+deb7u1\u003c/P\u003e",
  "content": "## Contournement provisoire\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2014-3647",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-3647"
    },
    {
      "name": "CVE-2014-3673",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-3673"
    },
    {
      "name": "CVE-2014-3687",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-3687"
    },
    {
      "name": "CVE-2014-3690",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-3690"
    },
    {
      "name": "CVE-2014-3645",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-3645"
    },
    {
      "name": "CVE-2014-3611",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-3611"
    },
    {
      "name": "CVE-2014-3688",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-3688"
    },
    {
      "name": "CVE-2014-3610",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-3610"
    },
    {
      "name": "CVE-2014-3646",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-3646"
    },
    {
      "name": "CVE-2014-7207",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-7207"
    }
  ],
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Debian DSA-3060-1 du 31 octobre 2014",
      "url": "https://www.debian.org/security/2014/dsa-3060"
    }
  ],
  "reference": "CERTFR-2014-AVI-459",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2014-11-03T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003ele noyau linux de Debian\u003c/span\u003e. Elles permettent \u00e0 un\nattaquant de provoquer un d\u00e9ni de service \u00e0 distance.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans le noyau linux de Debian",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Debian du 31 octobre 2014",
      "url": null
    }
  ]
}

CERTFR-2014-AVI-482

Vulnerability from certfr_avis - Published: - Updated:

De multiples vulnérabilités ont été corrigées dans le noyau Linux de Red Hat. Elles permettent à un attaquant de provoquer un déni de service.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

Vendor	Product	Description
Red Hat	Red Hat Enterprise Linux Server	Red Hat Enterprise Linux Server EUS (v. 6.6.z)
Red Hat	Red Hat Enterprise Linux	Red Hat Enterprise Linux HPC Node (v. 6)
Red Hat	Red Hat Enterprise Linux Server	Red Hat Enterprise Linux Server (v. 6)
Red Hat	Red Hat Enterprise Linux	Red Hat Enterprise Linux Desktop (v. 6)
Red Hat	Red Hat Enterprise Linux	Red Hat Enterprise Linux Workstation (v. 6)

References

Title

Publication Time

Tags

Bulletin de sécurité Red Hat RHSA-2014:1843-1 du 11 novembre 2014	None	vendor-advisory
Bulletin de sécurité Red Hat RHSA-2014:1843-1 du 11 novembre 2014	-	other

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Red Hat Enterprise Linux Server EUS (v. 6.6.z)",
      "product": {
        "name": "Red Hat Enterprise Linux Server",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux HPC Node (v. 6)",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux Server (v. 6)",
      "product": {
        "name": "Red Hat Enterprise Linux Server",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux Desktop (v. 6)",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux Workstation (v. 6)",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2014-3645",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-3645"
    },
    {
      "name": "CVE-2014-3185",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-3185"
    },
    {
      "name": "CVE-2014-3611",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-3611"
    },
    {
      "name": "CVE-2014-3646",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-3646"
    }
  ],
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Red Hat RHSA-2014:1843-1 du 11    novembre 2014",
      "url": "https://rhn.redhat.com/errata/RHSA-2014-1843.html"
    }
  ],
  "reference": "CERTFR-2014-AVI-482",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2014-11-13T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans le noyau Linux de\n\u003cspan class=\"textit\"\u003eRed Hat\u003c/span\u003e. Elles permettent \u00e0 un attaquant de\nprovoquer un d\u00e9ni de service.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans le noyau Linux de Red Hat",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Red Hat RHSA-2014:1843-1 du 11 novembre 2014",
      "url": null
    }
  ]
}

CERTFR-2014-AVI-495

Vulnerability from certfr_avis - Published: - Updated:

De multiples vulnérabilités ont été corrigées dans le noyau linux Ubuntu. Elles permettent à un attaquant de provoquer un déni de service.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

Vendor	Product	Description
Ubuntu	Ubuntu	Ubuntu 12.04 LTS
Ubuntu	Ubuntu	Ubuntu 14.04 LTS
Ubuntu	Ubuntu	Ubuntu 10.04 LTS
Ubuntu	Ubuntu	Ubuntu 14.10

References

Title

Publication Time

Tags

Bulletin de sécurité Ubuntu USN-2420-1 du 24 novembre 2014	None	vendor-advisory
Bulletin de sécurité Ubuntu USN-2415-1 du 24 novembre 2014	None	vendor-advisory
Bulletin de sécurité Ubuntu USN-2418-1 du 24 novembre 2014	None	vendor-advisory
Bulletin de sécurité Ubuntu USN-2419-1 du 24 novembre 2014	None	vendor-advisory
Bulletin de sécurité Ubuntu USN-2417-1 du 24 novembre 2014	None	vendor-advisory
Bulletin de sécurité Ubuntu USN-2421-1 du 24 novembre 2014	None	vendor-advisory
Bulletin de sécurité Ubuntu USN-2416-1 du 24 novembre 2014	None	vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Ubuntu 12.04 LTS",
      "product": {
        "name": "Ubuntu",
        "vendor": {
          "name": "Ubuntu",
          "scada": false
        }
      }
    },
    {
      "description": "Ubuntu 14.04 LTS",
      "product": {
        "name": "Ubuntu",
        "vendor": {
          "name": "Ubuntu",
          "scada": false
        }
      }
    },
    {
      "description": "Ubuntu 10.04 LTS",
      "product": {
        "name": "Ubuntu",
        "vendor": {
          "name": "Ubuntu",
          "scada": false
        }
      }
    },
    {
      "description": "Ubuntu 14.10",
      "product": {
        "name": "Ubuntu",
        "vendor": {
          "name": "Ubuntu",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2014-7970",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-7970"
    },
    {
      "name": "CVE-2014-3647",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-3647"
    },
    {
      "name": "CVE-2014-3673",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-3673"
    },
    {
      "name": "CVE-2014-4608",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-4608"
    },
    {
      "name": "CVE-2014-3687",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-3687"
    },
    {
      "name": "CVE-2014-3690",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-3690"
    },
    {
      "name": "CVE-2014-3645",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-3645"
    },
    {
      "name": "CVE-2014-3611",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-3611"
    },
    {
      "name": "CVE-2014-7975",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-7975"
    },
    {
      "name": "CVE-2014-3688",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-3688"
    },
    {
      "name": "CVE-2014-3610",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-3610"
    },
    {
      "name": "CVE-2014-3646",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-3646"
    },
    {
      "name": "CVE-2014-7207",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-7207"
    }
  ],
  "links": [],
  "reference": "CERTFR-2014-AVI-495",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2014-11-25T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans le \u003cspan\nclass=\"textit\"\u003enoyau linux Ubuntu\u003c/span\u003e. Elles permettent \u00e0 un\nattaquant de provoquer un d\u00e9ni de service.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans le noyau linux Ubuntu",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-2420-1 du 24 novembre 2014",
      "url": "http://www.ubuntu.com/usn/usn-2420-1/"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-2415-1 du 24 novembre 2014",
      "url": "http://www.ubuntu.com/usn/usn-2415-1/"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-2418-1 du 24 novembre 2014",
      "url": "http://www.ubuntu.com/usn/usn-2418-1/"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-2419-1 du 24 novembre 2014",
      "url": "http://www.ubuntu.com/usn/usn-2419-1/"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-2417-1 du 24 novembre 2014",
      "url": "http://www.ubuntu.com/usn/usn-2417-1/"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-2421-1 du 24 novembre 2014",
      "url": "http://www.ubuntu.com/usn/usn-2421-1/"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-2416-1 du 24 novembre 2014",
      "url": "http://www.ubuntu.com/usn/usn-2416-1/"
    }
  ]
}

CERTFR-2015-AVI-021

Vulnerability from certfr_avis - Published: - Updated:

De multiples vulnérabilités ont été corrigées dans le noyau Linux d'Ubuntu. Elles permettent à un attaquant de provoquer un déni de service, un contournement de la politique de sécurité et une élévation de privilèges.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

Vendor	Product	Description
Ubuntu	Ubuntu	Ubuntu 12.04 LTS
Ubuntu	Ubuntu	Ubuntu 14.04 LTS
Ubuntu	Ubuntu	Ubuntu 10.04 LTS
Ubuntu	Ubuntu	Ubuntu 14.10

References

Title

Publication Time

Tags

Bulletin de sécurité Ubuntu USN-2464-1 du 13 janvier 2015	None	vendor-advisory
Bulletin de sécurité Ubuntu USN-2463-1 du 13 janvier 2015	None	vendor-advisory
Bulletin de sécurité Ubuntu USN-2468-1 du 13 janvier 2015	None	vendor-advisory
Bulletin de sécurité Ubuntu USN-2466-1 du 13 janvier 2015	None	vendor-advisory
Bulletin de sécurité Ubuntu USN-2465-1 du 13 janvier 2015	None	vendor-advisory
Bulletin de sécurité Ubuntu USN-2462-1 du 13 janvier 2015	None	vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Ubuntu 12.04 LTS",
      "product": {
        "name": "Ubuntu",
        "vendor": {
          "name": "Ubuntu",
          "scada": false
        }
      }
    },
    {
      "description": "Ubuntu 14.04 LTS",
      "product": {
        "name": "Ubuntu",
        "vendor": {
          "name": "Ubuntu",
          "scada": false
        }
      }
    },
    {
      "description": "Ubuntu 10.04 LTS",
      "product": {
        "name": "Ubuntu",
        "vendor": {
          "name": "Ubuntu",
          "scada": false
        }
      }
    },
    {
      "description": "Ubuntu 14.10",
      "product": {
        "name": "Ubuntu",
        "vendor": {
          "name": "Ubuntu",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2014-9090",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-9090"
    },
    {
      "name": "CVE-2014-7842",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-7842"
    },
    {
      "name": "CVE-2014-7841",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-7841"
    },
    {
      "name": "CVE-2014-7843",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-7843"
    },
    {
      "name": "CVE-2014-8369",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-8369"
    },
    {
      "name": "CVE-2014-8134",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-8134"
    },
    {
      "name": "CVE-2014-3611",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-3611"
    },
    {
      "name": "CVE-2014-3610",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-3610"
    },
    {
      "name": "CVE-2014-8884",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-8884"
    },
    {
      "name": "CVE-2014-9322",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-9322"
    }
  ],
  "links": [],
  "reference": "CERTFR-2015-AVI-021",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2015-01-14T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans le noyau \u003cspan\nclass=\"textit\"\u003eLinux\u003c/span\u003e d\u0027\u003cspan class=\"textit\"\u003eUbuntu\u003c/span\u003e. Elles\npermettent \u00e0 un attaquant de provoquer un d\u00e9ni de service, un\ncontournement de la politique de s\u00e9curit\u00e9 et une \u00e9l\u00e9vation de\nprivil\u00e8ges.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans le noyau Linux d\u0027Ubuntu",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-2464-1 du 13 janvier 2015",
      "url": "http://www.ubuntu.com/usn/usn-2464-1/"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-2463-1 du 13 janvier 2015",
      "url": "http://www.ubuntu.com/usn/usn-2463-1/"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-2468-1 du 13 janvier 2015",
      "url": "http://www.ubuntu.com/usn/usn-2468-1/"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-2466-1 du 13 janvier 2015",
      "url": "http://www.ubuntu.com/usn/usn-2466-1/"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-2465-1 du 13 janvier 2015",
      "url": "http://www.ubuntu.com/usn/usn-2465-1/"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-2462-1 du 13 janvier 2015",
      "url": "http://www.ubuntu.com/usn/usn-2462-1/"
    }
  ]
}

CERTFR-2015-AVI-054

Vulnerability from certfr_avis - Published: - Updated:

De multiples vulnérabilités ont été corrigées dans le noyau Linux de Ubuntu. Elles permettent à un attaquant de provoquer un déni de service, une atteinte à la confidentialité des données et une élévation de privilèges.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Ubuntu 10.04 LTS, 12.04 LTS

Impacted products

	Vendor	Product	Description

References

Title

Publication Time

Tags

Bulletin de sécurité Ubuntu usn-2491-1 du 04 février 2015	None	vendor-advisory
Bulletin de sécurité Ubuntu usn-2492-1 du 04 février 2015	None	vendor-advisory
Bulletin de sécurité Ubuntu usn-2490-1 du 04 février 2015	None	vendor-advisory
Bulletin de sécurité Ubuntu usn-2493-1 du 04 février 2015	None	vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [],
  "affected_systems_content": "\u003cP\u003eUbuntu 10.04 LTS, 12.04 LTS\u003c/P\u003e",
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2014-8133",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-8133"
    },
    {
      "name": "CVE-2014-9420",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-9420"
    },
    {
      "name": "CVE-2014-3611",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-3611"
    },
    {
      "name": "CVE-2014-3610",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-3610"
    },
    {
      "name": "CVE-2014-9322",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-9322"
    },
    {
      "name": "CVE-2014-8559",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-8559"
    }
  ],
  "links": [],
  "reference": "CERTFR-2015-AVI-054",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2015-02-04T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans le noyau Linux de\n\u003cspan class=\"textit\"\u003eUbuntu\u003c/span\u003e. Elles permettent \u00e0 un attaquant de\nprovoquer un d\u00e9ni de service, une atteinte \u00e0 la confidentialit\u00e9 des\ndonn\u00e9es et une \u00e9l\u00e9vation de privil\u00e8ges.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans le noyau Linux d\u0027Ubuntu",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu usn-2491-1 du 04 f\u00e9vrier 2015",
      "url": "http://www.ubuntu.com/usn/usn-2491-1/"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu usn-2492-1 du 04 f\u00e9vrier 2015",
      "url": "http://www.ubuntu.com/usn/usn-2492-1/"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu usn-2490-1 du 04 f\u00e9vrier 2015",
      "url": "http://www.ubuntu.com/usn/usn-2490-1/"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu usn-2493-1 du 04 f\u00e9vrier 2015",
      "url": "http://www.ubuntu.com/usn/usn-2493-1/"
    }
  ]
}

CERTFR-2015-AVI-085

Vulnerability from certfr_avis - Published: - Updated:

De multiples vulnérabilités ont été corrigées dans le noyau Linux de Redhat. Elles permettent à un attaquant de provoquer un déni de service à distance, un déni de service et une élévation de privilèges.

Contournement provisoire

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

Vendor	Product	Description
Red Hat	Red Hat Enterprise Linux Server	Red Hat Enterprise Linux Server AUS (v. 6.4)
Red Hat	Red Hat Enterprise Linux Server	Red Hat Enterprise Linux Server EUS (v. 6.5.z)
Red Hat	Red Hat Enterprise Linux Server	Red Hat Enterprise Linux Server AUS (v. 6.5)
Red Hat	Red Hat Enterprise Linux Server	Red Hat Enterprise Linux Server EUS (v. 6.4.z)

References

Title

Publication Time

Tags

Bulletin de sécurité du 03 mars 2015	None	vendor-advisory
Bulletin de sécurité RedHat du 03 mars 2015	-	other
Bulletin de sécurité RedHat du 03 mars 2015	-	other

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Red Hat Enterprise Linux Server AUS (v. 6.4)",
      "product": {
        "name": "Red Hat Enterprise Linux Server",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux Server EUS (v. 6.5.z)",
      "product": {
        "name": "Red Hat Enterprise Linux Server",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux Server AUS (v. 6.5)",
      "product": {
        "name": "Red Hat Enterprise Linux Server",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux Server EUS (v. 6.4.z)",
      "product": {
        "name": "Red Hat Enterprise Linux Server",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Contournement provisoire\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2013-4483",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-4483"
    },
    {
      "name": "CVE-2014-7841",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-7841"
    },
    {
      "name": "CVE-2014-3645",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-3645"
    },
    {
      "name": "CVE-2014-8160",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-8160"
    },
    {
      "name": "CVE-2014-3185",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-3185"
    },
    {
      "name": "CVE-2014-3611",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-3611"
    },
    {
      "name": "CVE-2014-3646",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-3646"
    }
  ],
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 RedHat du 03 mars 2015",
      "url": "https://rhn.redhat.com/errata/RHSA-2015-0284.html"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 RedHat du 03 mars 2015",
      "url": "https://rhn.redhat.com/errata/RHSA-2015-0285.html"
    }
  ],
  "reference": "CERTFR-2015-AVI-085",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2015-03-04T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "D\u00e9ni de service"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans le noyau Linux de\n\u003cspan class=\"textit\"\u003eRedhat\u003c/span\u003e. Elles permettent \u00e0 un attaquant de\nprovoquer un d\u00e9ni de service \u00e0 distance, un d\u00e9ni de service et une\n\u00e9l\u00e9vation de privil\u00e8ges.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans le noyau Linux",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 du 03 mars 2015",
      "url": null
    }
  ]
}

CERTFR-2014-AVI-456

Vulnerability from certfr_avis - Published: - Updated:

De multiples vulnérabilités ont été corrigées dans le noyau Linux Ubuntu. Elles permettent à un attaquant de provoquer un déni de service à distance.

Contournement provisoire

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

	Vendor	Product	Description
	Ubuntu	Ubuntu	Ubuntu 12.04 LTS
	Ubuntu	Ubuntu	Ubuntu 14.04 LTS

References

Title

Publication Time

Tags

Bulletin de sécurité Ubuntu du 30 octobre 2014

None

vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Ubuntu 12.04 LTS",
      "product": {
        "name": "Ubuntu",
        "vendor": {
          "name": "Ubuntu",
          "scada": false
        }
      }
    },
    {
      "description": "Ubuntu 14.04 LTS",
      "product": {
        "name": "Ubuntu",
        "vendor": {
          "name": "Ubuntu",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Contournement provisoire\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2014-3647",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-3647"
    },
    {
      "name": "CVE-2014-7145",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-7145"
    },
    {
      "name": "CVE-2014-3611",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-3611"
    },
    {
      "name": "CVE-2014-3610",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-3610"
    },
    {
      "name": "CVE-2014-3646",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-3646"
    }
  ],
  "links": [],
  "reference": "CERTFR-2014-AVI-456",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2014-10-31T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003ele noyau Linux Ubuntu\u003c/span\u003e. Elles permettent \u00e0 un\nattaquant de provoquer un d\u00e9ni de service \u00e0 distance.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans le noyau Linux Ubuntu",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu du 30 octobre 2014",
      "url": "http://www.ubuntu.com/usn/usn-2395-1/"
    }
  ]
}

CERTFR-2014-AVI-459

Vulnerability from certfr_avis - Published: - Updated:

De multiples vulnérabilités ont été corrigées dans le noyau linux de Debian. Elles permettent à un attaquant de provoquer un déni de service à distance.

Contournement provisoire

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Debian Wheezy (version du noyau inférieure à 3.2.63-2+deb7u1

Impacted products

	Vendor	Product	Description

References

Title

Publication Time

Tags

Bulletin de sécurité Debian du 31 octobre 2014	None	vendor-advisory
Bulletin de sécurité Debian DSA-3060-1 du 31 octobre 2014	-	other

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [],
  "affected_systems_content": "\u003cP\u003eDebian Wheezy (version du noyau inf\u00e9rieure \u00e0  3.2.63-2+deb7u1\u003c/P\u003e",
  "content": "## Contournement provisoire\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2014-3647",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-3647"
    },
    {
      "name": "CVE-2014-3673",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-3673"
    },
    {
      "name": "CVE-2014-3687",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-3687"
    },
    {
      "name": "CVE-2014-3690",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-3690"
    },
    {
      "name": "CVE-2014-3645",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-3645"
    },
    {
      "name": "CVE-2014-3611",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-3611"
    },
    {
      "name": "CVE-2014-3688",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-3688"
    },
    {
      "name": "CVE-2014-3610",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-3610"
    },
    {
      "name": "CVE-2014-3646",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-3646"
    },
    {
      "name": "CVE-2014-7207",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-7207"
    }
  ],
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Debian DSA-3060-1 du 31 octobre 2014",
      "url": "https://www.debian.org/security/2014/dsa-3060"
    }
  ],
  "reference": "CERTFR-2014-AVI-459",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2014-11-03T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003ele noyau linux de Debian\u003c/span\u003e. Elles permettent \u00e0 un\nattaquant de provoquer un d\u00e9ni de service \u00e0 distance.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans le noyau linux de Debian",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Debian du 31 octobre 2014",
      "url": null
    }
  ]
}

CERTFR-2014-AVI-482

Vulnerability from certfr_avis - Published: - Updated:

De multiples vulnérabilités ont été corrigées dans le noyau Linux de Red Hat. Elles permettent à un attaquant de provoquer un déni de service.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

Vendor	Product	Description
Red Hat	Red Hat Enterprise Linux Server	Red Hat Enterprise Linux Server EUS (v. 6.6.z)
Red Hat	Red Hat Enterprise Linux	Red Hat Enterprise Linux HPC Node (v. 6)
Red Hat	Red Hat Enterprise Linux Server	Red Hat Enterprise Linux Server (v. 6)
Red Hat	Red Hat Enterprise Linux	Red Hat Enterprise Linux Desktop (v. 6)
Red Hat	Red Hat Enterprise Linux	Red Hat Enterprise Linux Workstation (v. 6)

References

Title

Publication Time

Tags

Bulletin de sécurité Red Hat RHSA-2014:1843-1 du 11 novembre 2014	None	vendor-advisory
Bulletin de sécurité Red Hat RHSA-2014:1843-1 du 11 novembre 2014	-	other

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Red Hat Enterprise Linux Server EUS (v. 6.6.z)",
      "product": {
        "name": "Red Hat Enterprise Linux Server",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux HPC Node (v. 6)",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux Server (v. 6)",
      "product": {
        "name": "Red Hat Enterprise Linux Server",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux Desktop (v. 6)",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux Workstation (v. 6)",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2014-3645",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-3645"
    },
    {
      "name": "CVE-2014-3185",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-3185"
    },
    {
      "name": "CVE-2014-3611",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-3611"
    },
    {
      "name": "CVE-2014-3646",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-3646"
    }
  ],
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Red Hat RHSA-2014:1843-1 du 11    novembre 2014",
      "url": "https://rhn.redhat.com/errata/RHSA-2014-1843.html"
    }
  ],
  "reference": "CERTFR-2014-AVI-482",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2014-11-13T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans le noyau Linux de\n\u003cspan class=\"textit\"\u003eRed Hat\u003c/span\u003e. Elles permettent \u00e0 un attaquant de\nprovoquer un d\u00e9ni de service.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans le noyau Linux de Red Hat",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Red Hat RHSA-2014:1843-1 du 11 novembre 2014",
      "url": null
    }
  ]
}

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2014-3611 (GCVE-0-2014-3611)

Contournement provisoire

Contournement provisoire

Solution

Solution

Solution

Solution

Contournement provisoire

Contournement provisoire

Contournement provisoire

Solution

Tags

Sightings

Nomenclature

Related by attack behaviour