Vulnerability-Lookup

RHSA-2014_1997

Vulnerability from csaf_redhat - Published: 2014-12-16 19:12 - Updated: 2024-11-22 08:47

Summary

Red Hat Security Advisory: kernel security and bug fix update

Severity

Important

Notes

Topic: Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section. The kernel packages contain the Linux kernel, the core of any Linux operating system.

Details: * A flaw was found in the way the Linux kernel handled GS segment register base switching when recovering from a #SS (stack segment) fault on an erroneous return to user space. A local, unprivileged user could use this flaw to escalate their privileges on the system. (CVE-2014-9322, Important) * A flaw was found in the way the Linux kernel's SCTP implementation handled malformed or duplicate Address Configuration Change Chunks (ASCONF). A remote attacker could use either of these flaws to crash the system. (CVE-2014-3673, CVE-2014-3687, Important) * A flaw was found in the way the Linux kernel's SCTP implementation handled the association's output queue. A remote attacker could send specially crafted packets that would cause the system to use an excessive amount of memory, leading to a denial of service. (CVE-2014-3688, Important) * A stack overflow flaw caused by infinite recursion was found in the way the Linux kernel's UDF file system implementation processed indirect ICBs. An attacker with physical access to the system could use a specially crafted UDF image to crash the system. (CVE-2014-6410, Low) * It was found that the Linux kernel's networking implementation did not correctly handle the setting of the keepalive socket option on raw sockets. A local user able to create a raw socket could use this flaw to crash the system. (CVE-2012-6657, Low) * It was found that the parse_rock_ridge_inode_internal() function of the Linux kernel's ISOFS implementation did not correctly check relocated directories when processing Rock Ridge child link (CL) tags. An attacker with physical access to the system could use a specially crafted ISO image to crash the system or, potentially, escalate their privileges on the system. (CVE-2014-5471, CVE-2014-5472, Low) Red Hat would like to thank Andy Lutomirski for reporting CVE-2014-9322. The CVE-2014-3673 issue was discovered by Liu Wei of Red Hat. Bug fixes: * This update fixes a race condition issue between the sock_queue_err_skb function and sk_forward_alloc handling in the socket error queue (MSG_ERRQUEUE), which could occasionally cause the kernel, for example when using PTP, to incorrectly track allocated memory for the error queue, in which case a traceback would occur in the system log. (BZ#1155427) * The zcrypt device driver did not detect certain crypto cards and the related domains for crypto adapters on System z and s390x architectures. Consequently, it was not possible to run the system on new crypto hardware. This update enables toleration mode for such devices so that the system can make use of newer crypto hardware. (BZ#1158311) * After mounting and unmounting an XFS file system several times consecutively, the umount command occasionally became unresponsive. This was caused by the xlog_cil_force_lsn() function that was not waiting for completion as expected. With this update, xlog_cil_force_lsn() has been modified to correctly wait for completion, thus fixing this bug. (BZ#1158325) * When using the ixgbe adapter with disabled LRO and the tx-usec or rs-usec variables set to 0, transmit interrupts could not be set lower than the default of 8 buffered tx frames. Consequently, a delay of TCP transfer occurred. The restriction of a minimum of 8 buffered frames has been removed, and the TCP delay no longer occurs. (BZ#1158326) * The offb driver has been updated for the QEMU standard VGA adapter, fixing an incorrect displaying of colors issue. (BZ#1158328) * Under certain circumstances, when a discovered MTU expired, the IPv6 connection became unavailable for a short period of time. This bug has been fixed, and the connection now works as expected. (BZ#1161418) * A low throughput occurred when using the dm-thin driver to write to unprovisioned or shared chunks for a thin pool with the chunk size bigger than the max_sectors_kb variable. (BZ#1161420) * Large write workloads on thin LVs could cause the iozone and smallfile utilities to terminate unexpectedly. (BZ#1161421)

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2012-6657

It was found that the Linux kernel's networking implementation did not correctly handle the setting of the keepalive socket option on raw sockets. A local user able to create a raw socket could use this flaw to crash the system.

4.4 ()


                
                  AV:L/AC:M/Au:S/C:N/I:N/A:C

Affected products

Fixed 448 products

Product	Version	Remediation
Unresolved product id: 6Client-6.6.z:kernel-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6Client-6.6.z:kernel-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Client-6.6.z:kernel-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6Client-6.6.z:kernel-0:2.6.32-504.3.3.el6.src	—	Vendor Fix fix
Unresolved product id: 6Client-6.6.z:kernel-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Client-6.6.z:kernel-abi-whitelists-0:2.6.32-504.3.3.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Client-6.6.z:kernel-bootwrapper-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Client-6.6.z:kernel-debug-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6Client-6.6.z:kernel-debug-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Client-6.6.z:kernel-debug-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6Client-6.6.z:kernel-debug-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Client-6.6.z:kernel-debug-debuginfo-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6Client-6.6.z:kernel-debug-debuginfo-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Client-6.6.z:kernel-debug-debuginfo-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6Client-6.6.z:kernel-debug-debuginfo-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Client-6.6.z:kernel-debug-devel-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6Client-6.6.z:kernel-debug-devel-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Client-6.6.z:kernel-debug-devel-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6Client-6.6.z:kernel-debug-devel-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Client-6.6.z:kernel-debuginfo-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6Client-6.6.z:kernel-debuginfo-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Client-6.6.z:kernel-debuginfo-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6Client-6.6.z:kernel-debuginfo-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Client-6.6.z:kernel-debuginfo-common-i686-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6Client-6.6.z:kernel-debuginfo-common-ppc64-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Client-6.6.z:kernel-debuginfo-common-s390x-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6Client-6.6.z:kernel-debuginfo-common-x86_64-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Client-6.6.z:kernel-devel-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6Client-6.6.z:kernel-devel-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Client-6.6.z:kernel-devel-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6Client-6.6.z:kernel-devel-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Client-6.6.z:kernel-doc-0:2.6.32-504.3.3.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Client-6.6.z:kernel-firmware-0:2.6.32-504.3.3.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Client-6.6.z:kernel-headers-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6Client-6.6.z:kernel-headers-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Client-6.6.z:kernel-headers-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6Client-6.6.z:kernel-headers-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Client-6.6.z:kernel-kdump-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6Client-6.6.z:kernel-kdump-debuginfo-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6Client-6.6.z:kernel-kdump-devel-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6Client-6.6.z:perf-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6Client-6.6.z:perf-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Client-6.6.z:perf-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6Client-6.6.z:perf-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Client-6.6.z:perf-debuginfo-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6Client-6.6.z:perf-debuginfo-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Client-6.6.z:perf-debuginfo-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6Client-6.6.z:perf-debuginfo-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Client-6.6.z:python-perf-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6Client-6.6.z:python-perf-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Client-6.6.z:python-perf-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6Client-6.6.z:python-perf-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Client-6.6.z:python-perf-debuginfo-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6Client-6.6.z:python-perf-debuginfo-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Client-6.6.z:python-perf-debuginfo-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6Client-6.6.z:python-perf-debuginfo-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:kernel-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:kernel-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:kernel-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:kernel-0:2.6.32-504.3.3.el6.src	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:kernel-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:kernel-abi-whitelists-0:2.6.32-504.3.3.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:kernel-bootwrapper-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:kernel-debug-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:kernel-debug-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:kernel-debug-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:kernel-debug-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:kernel-debug-debuginfo-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:kernel-debug-debuginfo-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:kernel-debug-debuginfo-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:kernel-debug-debuginfo-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:kernel-debug-devel-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:kernel-debug-devel-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:kernel-debug-devel-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:kernel-debug-devel-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:kernel-debuginfo-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:kernel-debuginfo-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:kernel-debuginfo-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:kernel-debuginfo-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:kernel-debuginfo-common-i686-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:kernel-debuginfo-common-ppc64-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:kernel-debuginfo-common-s390x-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:kernel-debuginfo-common-x86_64-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:kernel-devel-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:kernel-devel-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:kernel-devel-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:kernel-devel-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:kernel-doc-0:2.6.32-504.3.3.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:kernel-firmware-0:2.6.32-504.3.3.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:kernel-headers-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:kernel-headers-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:kernel-headers-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:kernel-headers-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:kernel-kdump-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:kernel-kdump-debuginfo-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:kernel-kdump-devel-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:perf-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:perf-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:perf-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:perf-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:perf-debuginfo-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:perf-debuginfo-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:perf-debuginfo-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:perf-debuginfo-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:python-perf-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:python-perf-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:python-perf-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:python-perf-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:python-perf-debuginfo-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:python-perf-debuginfo-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:python-perf-debuginfo-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:python-perf-debuginfo-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:kernel-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:kernel-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:kernel-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:kernel-0:2.6.32-504.3.3.el6.src	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:kernel-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:kernel-abi-whitelists-0:2.6.32-504.3.3.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:kernel-bootwrapper-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:kernel-debug-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:kernel-debug-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:kernel-debug-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:kernel-debug-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:kernel-debug-debuginfo-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:kernel-debug-debuginfo-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:kernel-debug-debuginfo-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:kernel-debug-debuginfo-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:kernel-debug-devel-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:kernel-debug-devel-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:kernel-debug-devel-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:kernel-debug-devel-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:kernel-debuginfo-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:kernel-debuginfo-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:kernel-debuginfo-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:kernel-debuginfo-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:kernel-debuginfo-common-i686-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:kernel-debuginfo-common-ppc64-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:kernel-debuginfo-common-s390x-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:kernel-debuginfo-common-x86_64-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:kernel-devel-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:kernel-devel-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:kernel-devel-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:kernel-devel-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:kernel-doc-0:2.6.32-504.3.3.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:kernel-firmware-0:2.6.32-504.3.3.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:kernel-headers-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:kernel-headers-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:kernel-headers-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:kernel-headers-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:kernel-kdump-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:kernel-kdump-debuginfo-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:kernel-kdump-devel-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:perf-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:perf-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:perf-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:perf-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:perf-debuginfo-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:perf-debuginfo-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:perf-debuginfo-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:perf-debuginfo-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:python-perf-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:python-perf-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:python-perf-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:python-perf-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:python-perf-debuginfo-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:python-perf-debuginfo-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:python-perf-debuginfo-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:python-perf-debuginfo-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:kernel-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:kernel-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:kernel-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:kernel-0:2.6.32-504.3.3.el6.src	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:kernel-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:kernel-abi-whitelists-0:2.6.32-504.3.3.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:kernel-bootwrapper-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:kernel-debug-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:kernel-debug-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:kernel-debug-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:kernel-debug-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:kernel-debug-debuginfo-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:kernel-debug-debuginfo-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:kernel-debug-debuginfo-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:kernel-debug-debuginfo-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:kernel-debug-devel-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:kernel-debug-devel-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:kernel-debug-devel-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:kernel-debug-devel-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:kernel-debuginfo-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:kernel-debuginfo-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:kernel-debuginfo-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:kernel-debuginfo-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:kernel-debuginfo-common-i686-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:kernel-debuginfo-common-ppc64-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:kernel-debuginfo-common-s390x-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:kernel-debuginfo-common-x86_64-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:kernel-devel-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:kernel-devel-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:kernel-devel-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:kernel-devel-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:kernel-doc-0:2.6.32-504.3.3.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:kernel-firmware-0:2.6.32-504.3.3.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:kernel-headers-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:kernel-headers-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:kernel-headers-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:kernel-headers-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:kernel-kdump-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:kernel-kdump-debuginfo-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:kernel-kdump-devel-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:perf-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:perf-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:perf-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:perf-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:perf-debuginfo-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:perf-debuginfo-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:perf-debuginfo-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:perf-debuginfo-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:python-perf-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:python-perf-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:python-perf-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:python-perf-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:python-perf-debuginfo-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:python-perf-debuginfo-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:python-perf-debuginfo-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:python-perf-debuginfo-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:kernel-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:kernel-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:kernel-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:kernel-0:2.6.32-504.3.3.el6.src	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:kernel-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:kernel-abi-whitelists-0:2.6.32-504.3.3.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:kernel-bootwrapper-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:kernel-debug-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:kernel-debug-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:kernel-debug-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:kernel-debug-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:kernel-debug-debuginfo-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:kernel-debug-debuginfo-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:kernel-debug-debuginfo-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:kernel-debug-debuginfo-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:kernel-debug-devel-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:kernel-debug-devel-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:kernel-debug-devel-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:kernel-debug-devel-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:kernel-debuginfo-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:kernel-debuginfo-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:kernel-debuginfo-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:kernel-debuginfo-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:kernel-debuginfo-common-i686-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:kernel-debuginfo-common-ppc64-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:kernel-debuginfo-common-s390x-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:kernel-debuginfo-common-x86_64-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:kernel-devel-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:kernel-devel-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:kernel-devel-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:kernel-devel-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:kernel-doc-0:2.6.32-504.3.3.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:kernel-firmware-0:2.6.32-504.3.3.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:kernel-headers-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:kernel-headers-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:kernel-headers-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:kernel-headers-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:kernel-kdump-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:kernel-kdump-debuginfo-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:kernel-kdump-devel-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:perf-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:perf-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:perf-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:perf-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:perf-debuginfo-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:perf-debuginfo-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:perf-debuginfo-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:perf-debuginfo-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:python-perf-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:python-perf-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:python-perf-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:python-perf-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:python-perf-debuginfo-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:python-perf-debuginfo-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:python-perf-debuginfo-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:python-perf-debuginfo-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:kernel-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:kernel-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:kernel-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:kernel-0:2.6.32-504.3.3.el6.src	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:kernel-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:kernel-abi-whitelists-0:2.6.32-504.3.3.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:kernel-bootwrapper-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:kernel-debug-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:kernel-debug-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:kernel-debug-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:kernel-debug-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:kernel-debug-debuginfo-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:kernel-debug-debuginfo-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:kernel-debug-debuginfo-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:kernel-debug-debuginfo-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:kernel-debug-devel-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:kernel-debug-devel-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:kernel-debug-devel-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:kernel-debug-devel-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:kernel-debuginfo-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:kernel-debuginfo-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:kernel-debuginfo-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:kernel-debuginfo-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:kernel-debuginfo-common-i686-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:kernel-debuginfo-common-ppc64-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:kernel-debuginfo-common-s390x-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:kernel-debuginfo-common-x86_64-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:kernel-devel-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:kernel-devel-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:kernel-devel-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:kernel-devel-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:kernel-doc-0:2.6.32-504.3.3.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:kernel-firmware-0:2.6.32-504.3.3.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:kernel-headers-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:kernel-headers-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:kernel-headers-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:kernel-headers-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:kernel-kdump-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:kernel-kdump-debuginfo-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:kernel-kdump-devel-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:perf-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:perf-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:perf-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:perf-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:perf-debuginfo-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:perf-debuginfo-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:perf-debuginfo-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:perf-debuginfo-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:python-perf-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:python-perf-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:python-perf-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:python-perf-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:python-perf-debuginfo-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:python-perf-debuginfo-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:python-perf-debuginfo-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:python-perf-debuginfo-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:kernel-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:kernel-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:kernel-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:kernel-0:2.6.32-504.3.3.el6.src	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:kernel-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:kernel-abi-whitelists-0:2.6.32-504.3.3.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:kernel-bootwrapper-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:kernel-debug-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:kernel-debug-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:kernel-debug-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:kernel-debug-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:kernel-debug-debuginfo-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:kernel-debug-debuginfo-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:kernel-debug-debuginfo-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:kernel-debug-debuginfo-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:kernel-debug-devel-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:kernel-debug-devel-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:kernel-debug-devel-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:kernel-debug-devel-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:kernel-debuginfo-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:kernel-debuginfo-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:kernel-debuginfo-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:kernel-debuginfo-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:kernel-debuginfo-common-i686-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:kernel-debuginfo-common-ppc64-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:kernel-debuginfo-common-s390x-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:kernel-debuginfo-common-x86_64-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:kernel-devel-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:kernel-devel-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:kernel-devel-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:kernel-devel-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:kernel-doc-0:2.6.32-504.3.3.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:kernel-firmware-0:2.6.32-504.3.3.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:kernel-headers-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:kernel-headers-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:kernel-headers-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:kernel-headers-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:kernel-kdump-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:kernel-kdump-debuginfo-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:kernel-kdump-devel-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:perf-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:perf-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:perf-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:perf-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:perf-debuginfo-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:perf-debuginfo-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:perf-debuginfo-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:perf-debuginfo-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:python-perf-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:python-perf-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:python-perf-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:python-perf-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:python-perf-debuginfo-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:python-perf-debuginfo-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:python-perf-debuginfo-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:python-perf-debuginfo-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:kernel-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:kernel-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:kernel-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:kernel-0:2.6.32-504.3.3.el6.src	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:kernel-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:kernel-abi-whitelists-0:2.6.32-504.3.3.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:kernel-bootwrapper-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:kernel-debug-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:kernel-debug-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:kernel-debug-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:kernel-debug-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:kernel-debug-debuginfo-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:kernel-debug-debuginfo-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:kernel-debug-debuginfo-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:kernel-debug-debuginfo-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:kernel-debug-devel-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:kernel-debug-devel-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:kernel-debug-devel-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:kernel-debug-devel-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:kernel-debuginfo-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:kernel-debuginfo-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:kernel-debuginfo-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:kernel-debuginfo-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:kernel-debuginfo-common-i686-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:kernel-debuginfo-common-ppc64-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:kernel-debuginfo-common-s390x-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:kernel-debuginfo-common-x86_64-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:kernel-devel-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:kernel-devel-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:kernel-devel-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:kernel-devel-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:kernel-doc-0:2.6.32-504.3.3.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:kernel-firmware-0:2.6.32-504.3.3.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:kernel-headers-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:kernel-headers-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:kernel-headers-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:kernel-headers-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:kernel-kdump-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:kernel-kdump-debuginfo-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:kernel-kdump-devel-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:perf-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:perf-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:perf-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:perf-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:perf-debuginfo-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:perf-debuginfo-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:perf-debuginfo-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:perf-debuginfo-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:python-perf-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:python-perf-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:python-perf-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:python-perf-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:python-perf-debuginfo-0:2.6.32-504.3.3.el6.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:python-perf-debuginfo-0:2.6.32-504.3.3.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:python-perf-debuginfo-0:2.6.32-504.3.3.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:python-perf-debuginfo-0:2.6.32-504.3.3.el6.x86_64	—	Vendor Fix fix

Threats

Impact Low

CVE-2014-3673

A flaw was found in the way the Linux kernel's Stream Control Transmission Protocol (SCTP) implementation handled malformed Address Configuration Change Chunks (ASCONF). A remote attacker could use either of these flaws to crash the system.

7.1 ()


                
                  AV:N/AC:M/Au:N/C:N/I:N/A:C

CWE-20 - Improper Input Validation

Affected products

Fixed 448 products, the same list as for CVE-2012-6657

Threats

Impact Important

CVE-2014-3687

A flaw was found in the way the Linux kernel's Stream Control Transmission Protocol (SCTP) implementation handled duplicate Address Configuration Change Chunks (ASCONF). A remote attacker could use either of these flaws to crash the system.

7.1 ()


                
                  AV:N/AC:M/Au:N/C:N/I:N/A:C

Affected products

Fixed 448 products, the same list as for CVE-2012-6657

Threats

Impact Important

CVE-2014-3688

A flaw was found in the way the Linux kernel's Stream Control Transmission Protocol (SCTP) implementation handled the association's output queue. A remote attacker could send specially crafted packets that would cause the system to use an excessive amount of memory, leading to a denial of service.

7.1 ()


                
                  AV:N/AC:M/Au:N/C:N/I:N/A:C

Affected products

Fixed 448 products, the same list as for CVE-2012-6657

Threats

Impact Important

CVE-2014-5471

It was found that the parse_rock_ridge_inode_internal() function of the Linux kernel's ISOFS implementation did not correctly check relocated directories when processing Rock Ridge child link (CL) tags. An attacker with physical access to the system could use a specially crafted ISO image to crash the system or, potentially, escalate their privileges on the system.

6.2 ()


                
                  AV:L/AC:H/Au:N/C:C/I:C/A:C

Affected products

Fixed 448 products, the same list as for CVE-2012-6657

Threats

Impact Low

CVE-2014-5472

6.2 ()


                
                  AV:L/AC:H/Au:N/C:C/I:C/A:C

Affected products

Fixed 448 products, the same list as for CVE-2012-6657

Threats

Impact Low

CVE-2014-6410

A stack overflow flaw caused by infinite recursion was found in the way the Linux kernel's Universal Disk Format (UDF) file system implementation processed indirect Information Control Blocks (ICBs). An attacker with physical access to the system could use a specially crafted UDF image to crash the system.

4.9 ()


                
                  AV:L/AC:L/Au:N/C:N/I:N/A:C

CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')

Affected products

Fixed 448 products, the same list as for CVE-2012-6657

Threats

Impact Low

CVE-2014-9322

A flaw was found in the way the Linux kernel handled GS segment register base switching when recovering from a #SS (stack segment) fault on an erroneous return to user space. A local, unprivileged user could use this flaw to escalate their privileges on the system.

8.4 (High)


                
                  CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-841 - Improper Enforcement of Behavioral Workflow

Affected products

Fixed 448 products, the same list as for CVE-2012-6657

Threats

Impact Important

References

41 references

URL	Category
https://access.redhat.com/errata/RHSA-2014:1997	self
https://access.redhat.com/security/updates/classi…	external
https://bugzilla.redhat.com/show_bug.cgi?id=1134099	external
https://bugzilla.redhat.com/show_bug.cgi?id=1141742	external
https://bugzilla.redhat.com/show_bug.cgi?id=1141809	external
https://bugzilla.redhat.com/show_bug.cgi?id=1147850	external
https://bugzilla.redhat.com/show_bug.cgi?id=1155731	external
https://bugzilla.redhat.com/show_bug.cgi?id=1155745	external
https://bugzilla.redhat.com/show_bug.cgi?id=1172806	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2012-6657	self
https://bugzilla.redhat.com/show_bug.cgi?id=1141742	external
https://www.cve.org/CVERecord?id=CVE-2012-6657	external
https://nvd.nist.gov/vuln/detail/CVE-2012-6657	external
https://access.redhat.com/security/cve/CVE-2014-3673	self
https://bugzilla.redhat.com/show_bug.cgi?id=1147850	external
https://www.cve.org/CVERecord?id=CVE-2014-3673	external
https://nvd.nist.gov/vuln/detail/CVE-2014-3673	external
https://access.redhat.com/security/cve/CVE-2014-3687	self
https://bugzilla.redhat.com/show_bug.cgi?id=1155731	external
https://www.cve.org/CVERecord?id=CVE-2014-3687	external
https://nvd.nist.gov/vuln/detail/CVE-2014-3687	external
https://access.redhat.com/security/cve/CVE-2014-3688	self
https://bugzilla.redhat.com/show_bug.cgi?id=1155745	external
https://www.cve.org/CVERecord?id=CVE-2014-3688	external
https://nvd.nist.gov/vuln/detail/CVE-2014-3688	external
https://access.redhat.com/security/cve/CVE-2014-5471	self
https://bugzilla.redhat.com/show_bug.cgi?id=1134099	external
https://www.cve.org/CVERecord?id=CVE-2014-5471	external
https://nvd.nist.gov/vuln/detail/CVE-2014-5471	external
https://access.redhat.com/security/cve/CVE-2014-5472	self
https://www.cve.org/CVERecord?id=CVE-2014-5472	external
https://nvd.nist.gov/vuln/detail/CVE-2014-5472	external
https://access.redhat.com/security/cve/CVE-2014-6410	self
https://bugzilla.redhat.com/show_bug.cgi?id=1141809	external
https://www.cve.org/CVERecord?id=CVE-2014-6410	external
https://nvd.nist.gov/vuln/detail/CVE-2014-6410	external
https://access.redhat.com/security/cve/CVE-2014-9322	self
https://bugzilla.redhat.com/show_bug.cgi?id=1172806	external
https://www.cve.org/CVERecord?id=CVE-2014-9322	external
https://nvd.nist.gov/vuln/detail/CVE-2014-9322	external

Acknowledgments

Red Hat Liu Wei

Andy Lutomirski

JSON

To clipboard

Loading 1.1 MB of JSON…

CVE-2012-6657 (GCVE-0-2012-6657)

Vulnerability from cvelistv5 – Published: 2014-09-28 10:00 – Updated: 2024-08-06 21:36

Summary

The sock_setsockopt function in net/core/sock.c in the Linux kernel before 3.5.7 does not ensure that a keepalive action is associated with a stream socket, which allows local users to cause a denial of service (system crash) by leveraging the ability to create a raw socket.

Severity

No CVSS data available.

CWE

Assigner

redhat redhat root

References

9 references

URL	Tags
http://www.kernel.org/pub/linux/kernel/v3.x/Chang…	x_refsource_CONFIRM
http://marc.info/?l=bugtraq&m=142722450701342&w=2	vendor-advisoryx_refsource_HP
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://marc.info/?l=bugtraq&m=142722544401658&w=2	vendor-advisoryx_refsource_HP
https://bugzilla.redhat.com/show_bug.cgi?id=1141742	x_refsource_CONFIRM
https://github.com/torvalds/linux/commit/3e10986d…	x_refsource_CONFIRM
http://git.kernel.org/?p=linux/kernel/git/torvald…	x_refsource_CONFIRM
http://www.openwall.com/lists/oss-security/2014/09/15/8	mailing-listx_refsource_MLIST
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE

Date Public

2012-10-13 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T21:36:01.830Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.5.7"
          },
          {
            "name": "HPSBGN03285",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142722450701342\u0026w=2"
          },
          {
            "name": "SUSE-SU-2015:0652",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00000.html"
          },
          {
            "name": "HPSBGN03282",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142722544401658\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1141742"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/3e10986d1d698140747fcfc2761ec9cb64c1d582"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=3e10986d1d698140747fcfc2761ec9cb64c1d582"
          },
          {
            "name": "[oss-security] 20140915 Re: CVE request Linux kernel: net: guard tcp_set_keepalive against crash",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2014/09/15/8"
          },
          {
            "name": "SUSE-SU-2015:0812",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2012-10-13T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The sock_setsockopt function in net/core/sock.c in the Linux kernel before 3.5.7 does not ensure that a keepalive action is associated with a stream socket, which allows local users to cause a denial of service (system crash) by leveraging the ability to create a raw socket."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-08-19T15:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.5.7"
        },
        {
          "name": "HPSBGN03285",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142722450701342\u0026w=2"
        },
        {
          "name": "SUSE-SU-2015:0652",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00000.html"
        },
        {
          "name": "HPSBGN03282",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142722544401658\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1141742"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/torvalds/linux/commit/3e10986d1d698140747fcfc2761ec9cb64c1d582"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=3e10986d1d698140747fcfc2761ec9cb64c1d582"
        },
        {
          "name": "[oss-security] 20140915 Re: CVE request Linux kernel: net: guard tcp_set_keepalive against crash",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2014/09/15/8"
        },
        {
          "name": "SUSE-SU-2015:0812",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2012-6657",
    "datePublished": "2014-09-28T10:00:00.000Z",
    "dateReserved": "2014-09-15T00:00:00.000Z",
    "dateUpdated": "2024-08-06T21:36:01.830Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2014-3673 (GCVE-0-2014-3673)

Vulnerability from cvelistv5 – Published: 2014-11-10 11:00 – Updated: 2024-08-06 10:50

Summary

The SCTP implementation in the Linux kernel through 3.17.2 allows remote attackers to cause a denial of service (system crash) via a malformed ASCONF chunk, related to net/sctp/sm_make_chunk.c and net/sctp/sm_statefuns.c.

Severity

No CVSS data available.

CWE

Assigner

redhat redhat root

References

20 references

URL	Tags
http://www.securityfocus.com/bid/70883	vdb-entryx_refsource_BID
http://linux.oracle.com/errata/ELSA-2014-3087.html	x_refsource_CONFIRM
http://marc.info/?l=bugtraq&m=142722450701342&w=2	vendor-advisoryx_refsource_HP
http://www.ubuntu.com/usn/USN-2418-1	vendor-advisoryx_refsource_UBUNTU
http://linux.oracle.com/errata/ELSA-2014-3089.html	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://rhn.redhat.com/errata/RHSA-2015-0062.html	vendor-advisoryx_refsource_REDHAT
http://www.ubuntu.com/usn/USN-2417-1	vendor-advisoryx_refsource_UBUNTU
http://marc.info/?l=bugtraq&m=142722544401658&w=2	vendor-advisoryx_refsource_HP
http://linux.oracle.com/errata/ELSA-2014-3088.html	x_refsource_CONFIRM
http://www.debian.org/security/2014/dsa-3060	vendor-advisoryx_refsource_DEBIAN
https://github.com/torvalds/linux/commit/9de7922b…	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://secunia.com/advisories/62428	third-party-advisoryx_refsource_SECUNIA
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://bugzilla.redhat.com/show_bug.cgi?id=1147850	x_refsource_CONFIRM
http://git.kernel.org/?p=linux/kernel/git/torvald…	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://rhn.redhat.com/errata/RHSA-2015-0115.html	vendor-advisoryx_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE

Date Public

2014-10-05 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T10:50:18.304Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "70883",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/70883"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://linux.oracle.com/errata/ELSA-2014-3087.html"
          },
          {
            "name": "HPSBGN03285",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142722450701342\u0026w=2"
          },
          {
            "name": "USN-2418-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2418-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://linux.oracle.com/errata/ELSA-2014-3089.html"
          },
          {
            "name": "SUSE-SU-2015:0652",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00000.html"
          },
          {
            "name": "RHSA-2015:0062",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0062.html"
          },
          {
            "name": "USN-2417-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2417-1"
          },
          {
            "name": "HPSBGN03282",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142722544401658\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://linux.oracle.com/errata/ELSA-2014-3088.html"
          },
          {
            "name": "DSA-3060",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-3060"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/9de7922bc709eee2f609cd01d98aaedc4cf5ea74"
          },
          {
            "name": "SUSE-SU-2015:0481",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html"
          },
          {
            "name": "62428",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/62428"
          },
          {
            "name": "openSUSE-SU-2015:0566",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1147850"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=9de7922bc709eee2f609cd01d98aaedc4cf5ea74"
          },
          {
            "name": "SUSE-SU-2015:0529",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00020.html"
          },
          {
            "name": "RHSA-2015:0115",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0115.html"
          },
          {
            "name": "SUSE-SU-2015:0812",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-10-05T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The SCTP implementation in the Linux kernel through 3.17.2 allows remote attackers to cause a denial of service (system crash) via a malformed ASCONF chunk, related to net/sctp/sm_make_chunk.c and net/sctp/sm_statefuns.c."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-08-19T15:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "70883",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/70883"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://linux.oracle.com/errata/ELSA-2014-3087.html"
        },
        {
          "name": "HPSBGN03285",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142722450701342\u0026w=2"
        },
        {
          "name": "USN-2418-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2418-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://linux.oracle.com/errata/ELSA-2014-3089.html"
        },
        {
          "name": "SUSE-SU-2015:0652",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00000.html"
        },
        {
          "name": "RHSA-2015:0062",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0062.html"
        },
        {
          "name": "USN-2417-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2417-1"
        },
        {
          "name": "HPSBGN03282",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142722544401658\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://linux.oracle.com/errata/ELSA-2014-3088.html"
        },
        {
          "name": "DSA-3060",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-3060"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/torvalds/linux/commit/9de7922bc709eee2f609cd01d98aaedc4cf5ea74"
        },
        {
          "name": "SUSE-SU-2015:0481",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html"
        },
        {
          "name": "62428",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/62428"
        },
        {
          "name": "openSUSE-SU-2015:0566",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1147850"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=9de7922bc709eee2f609cd01d98aaedc4cf5ea74"
        },
        {
          "name": "SUSE-SU-2015:0529",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00020.html"
        },
        {
          "name": "RHSA-2015:0115",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0115.html"
        },
        {
          "name": "SUSE-SU-2015:0812",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2014-3673",
    "datePublished": "2014-11-10T11:00:00.000Z",
    "dateReserved": "2014-05-14T00:00:00.000Z",
    "dateUpdated": "2024-08-06T10:50:18.304Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2014-3687 (GCVE-0-2014-3687)

Vulnerability from cvelistv5 – Published: 2014-11-10 11:00 – Updated: 2024-08-06 10:50

Summary

The sctp_assoc_lookup_asconf_ack function in net/sctp/associola.c in the SCTP implementation in the Linux kernel through 3.17.2 allows remote attackers to cause a denial of service (panic) via duplicate ASCONF chunks that trigger an incorrect uncork within the side-effect interpreter.

Severity

No CVSS data available.

CWE

Assigner

redhat redhat root

References

22 references

URL	Tags
http://linux.oracle.com/errata/ELSA-2014-3087.html	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://marc.info/?l=bugtraq&m=142722450701342&w=2	vendor-advisoryx_refsource_HP
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.ubuntu.com/usn/USN-2418-1	vendor-advisoryx_refsource_UBUNTU
http://linux.oracle.com/errata/ELSA-2014-3089.html	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://rhn.redhat.com/errata/RHSA-2015-0062.html	vendor-advisoryx_refsource_REDHAT
http://www.ubuntu.com/usn/USN-2417-1	vendor-advisoryx_refsource_UBUNTU
http://marc.info/?l=bugtraq&m=142722544401658&w=2	vendor-advisoryx_refsource_HP
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://github.com/torvalds/linux/commit/b69040d8…	x_refsource_CONFIRM
http://git.kernel.org/?p=linux/kernel/git/torvald…	x_refsource_CONFIRM
http://linux.oracle.com/errata/ELSA-2014-3088.html	x_refsource_CONFIRM
http://www.debian.org/security/2014/dsa-3060	vendor-advisoryx_refsource_DEBIAN
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://secunia.com/advisories/62428	third-party-advisoryx_refsource_SECUNIA
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.securityfocus.com/bid/70766	vdb-entryx_refsource_BID
https://bugzilla.redhat.com/show_bug.cgi?id=1155731	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://rhn.redhat.com/errata/RHSA-2015-0115.html	vendor-advisoryx_refsource_REDHAT

Date Public

2014-10-05 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T10:50:18.256Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://linux.oracle.com/errata/ELSA-2014-3087.html"
          },
          {
            "name": "SUSE-SU-2015:1489",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00009.html"
          },
          {
            "name": "HPSBGN03285",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142722450701342\u0026w=2"
          },
          {
            "name": "SUSE-SU-2015:0736",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html"
          },
          {
            "name": "USN-2418-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2418-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://linux.oracle.com/errata/ELSA-2014-3089.html"
          },
          {
            "name": "SUSE-SU-2015:0652",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00000.html"
          },
          {
            "name": "RHSA-2015:0062",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0062.html"
          },
          {
            "name": "USN-2417-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2417-1"
          },
          {
            "name": "HPSBGN03282",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142722544401658\u0026w=2"
          },
          {
            "name": "SUSE-SU-2015:0178",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00035.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/b69040d8e39f20d5215a03502a8e8b4c6ab78395"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b69040d8e39f20d5215a03502a8e8b4c6ab78395"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://linux.oracle.com/errata/ELSA-2014-3088.html"
          },
          {
            "name": "DSA-3060",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-3060"
          },
          {
            "name": "SUSE-SU-2015:0481",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html"
          },
          {
            "name": "62428",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/62428"
          },
          {
            "name": "openSUSE-SU-2015:0566",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html"
          },
          {
            "name": "70766",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/70766"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1155731"
          },
          {
            "name": "SUSE-SU-2015:0529",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00020.html"
          },
          {
            "name": "RHSA-2015:0115",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0115.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-10-05T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The sctp_assoc_lookup_asconf_ack function in net/sctp/associola.c in the SCTP implementation in the Linux kernel through 3.17.2 allows remote attackers to cause a denial of service (panic) via duplicate ASCONF chunks that trigger an incorrect uncork within the side-effect interpreter."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-12-20T16:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://linux.oracle.com/errata/ELSA-2014-3087.html"
        },
        {
          "name": "SUSE-SU-2015:1489",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00009.html"
        },
        {
          "name": "HPSBGN03285",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142722450701342\u0026w=2"
        },
        {
          "name": "SUSE-SU-2015:0736",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html"
        },
        {
          "name": "USN-2418-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2418-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://linux.oracle.com/errata/ELSA-2014-3089.html"
        },
        {
          "name": "SUSE-SU-2015:0652",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00000.html"
        },
        {
          "name": "RHSA-2015:0062",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0062.html"
        },
        {
          "name": "USN-2417-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2417-1"
        },
        {
          "name": "HPSBGN03282",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142722544401658\u0026w=2"
        },
        {
          "name": "SUSE-SU-2015:0178",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00035.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/torvalds/linux/commit/b69040d8e39f20d5215a03502a8e8b4c6ab78395"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b69040d8e39f20d5215a03502a8e8b4c6ab78395"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://linux.oracle.com/errata/ELSA-2014-3088.html"
        },
        {
          "name": "DSA-3060",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-3060"
        },
        {
          "name": "SUSE-SU-2015:0481",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html"
        },
        {
          "name": "62428",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/62428"
        },
        {
          "name": "openSUSE-SU-2015:0566",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html"
        },
        {
          "name": "70766",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/70766"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1155731"
        },
        {
          "name": "SUSE-SU-2015:0529",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00020.html"
        },
        {
          "name": "RHSA-2015:0115",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0115.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2014-3687",
    "datePublished": "2014-11-10T11:00:00.000Z",
    "dateReserved": "2014-05-14T00:00:00.000Z",
    "dateUpdated": "2024-08-06T10:50:18.256Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2014-3688 (GCVE-0-2014-3688)

Vulnerability from cvelistv5 – Published: 2014-11-30 01:00 – Updated: 2024-08-06 10:50

Summary

The SCTP implementation in the Linux kernel before 3.17.4 allows remote attackers to cause a denial of service (memory consumption) by triggering a large number of chunks in an association's output queue, as demonstrated by ASCONF probes, related to net/sctp/inqueue.c and net/sctp/sm_statefuns.c.

Severity

No CVSS data available.

CWE

Assigner

redhat redhat root

References

16 references

URL	Tags
http://www.openwall.com/lists/oss-security/2014/11/13/8	mailing-listx_refsource_MLIST
http://marc.info/?l=bugtraq&m=142722450701342&w=2	vendor-advisoryx_refsource_HP
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.ubuntu.com/usn/USN-2418-1	vendor-advisoryx_refsource_UBUNTU
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://rhn.redhat.com/errata/RHSA-2015-0062.html	vendor-advisoryx_refsource_REDHAT
http://www.ubuntu.com/usn/USN-2417-1	vendor-advisoryx_refsource_UBUNTU
http://marc.info/?l=bugtraq&m=142722544401658&w=2	vendor-advisoryx_refsource_HP
http://www.debian.org/security/2014/dsa-3060	vendor-advisoryx_refsource_DEBIAN
https://github.com/torvalds/linux/commit/26b87c78…	x_refsource_CONFIRM
http://git.kernel.org/?p=linux/kernel/git/torvald…	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://bugzilla.redhat.com/show_bug.cgi?id=1155745	x_refsource_CONFIRM
http://www.kernel.org/pub/linux/kernel/v3.x/Chang…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2015-0115.html	vendor-advisoryx_refsource_REDHAT

Date Public

2014-11-13 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T10:50:18.333Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[oss-security] 20141113 Linux kernel: SCTP issues",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2014/11/13/8"
          },
          {
            "name": "HPSBGN03285",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142722450701342\u0026w=2"
          },
          {
            "name": "SUSE-SU-2015:0736",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html"
          },
          {
            "name": "USN-2418-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2418-1"
          },
          {
            "name": "SUSE-SU-2015:0652",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00000.html"
          },
          {
            "name": "RHSA-2015:0062",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0062.html"
          },
          {
            "name": "USN-2417-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2417-1"
          },
          {
            "name": "HPSBGN03282",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142722544401658\u0026w=2"
          },
          {
            "name": "DSA-3060",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-3060"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/26b87c7881006311828bb0ab271a551a62dcceb4"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=26b87c7881006311828bb0ab271a551a62dcceb4"
          },
          {
            "name": "SUSE-SU-2015:0481",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html"
          },
          {
            "name": "openSUSE-SU-2015:0566",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1155745"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.17.4"
          },
          {
            "name": "RHSA-2015:0115",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0115.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-11-13T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The SCTP implementation in the Linux kernel before 3.17.4 allows remote attackers to cause a denial of service (memory consumption) by triggering a large number of chunks in an association\u0027s output queue, as demonstrated by ASCONF probes, related to net/sctp/inqueue.c and net/sctp/sm_statefuns.c."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-08-19T15:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "[oss-security] 20141113 Linux kernel: SCTP issues",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2014/11/13/8"
        },
        {
          "name": "HPSBGN03285",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142722450701342\u0026w=2"
        },
        {
          "name": "SUSE-SU-2015:0736",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html"
        },
        {
          "name": "USN-2418-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2418-1"
        },
        {
          "name": "SUSE-SU-2015:0652",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00000.html"
        },
        {
          "name": "RHSA-2015:0062",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0062.html"
        },
        {
          "name": "USN-2417-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2417-1"
        },
        {
          "name": "HPSBGN03282",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142722544401658\u0026w=2"
        },
        {
          "name": "DSA-3060",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-3060"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/torvalds/linux/commit/26b87c7881006311828bb0ab271a551a62dcceb4"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=26b87c7881006311828bb0ab271a551a62dcceb4"
        },
        {
          "name": "SUSE-SU-2015:0481",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html"
        },
        {
          "name": "openSUSE-SU-2015:0566",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1155745"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.17.4"
        },
        {
          "name": "RHSA-2015:0115",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0115.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2014-3688",
    "datePublished": "2014-11-30T01:00:00.000Z",
    "dateReserved": "2014-05-14T00:00:00.000Z",
    "dateUpdated": "2024-08-06T10:50:18.333Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2014-5471 (GCVE-0-2014-5471)

Vulnerability from cvelistv5 – Published: 2014-09-01 01:00 – Updated: 2024-08-06 11:48

Summary

Stack consumption vulnerability in the parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the Linux kernel through 3.16.1 allows local users to cause a denial of service (uncontrolled recursion, and system crash or reboot) via a crafted iso9660 image with a CL entry referring to a directory entry that has a CL entry.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

26 references

URL	Tags
http://rhn.redhat.com/errata/RHSA-2014-1318.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-0695.html	vendor-advisoryx_refsource_REDHAT
http://marc.info/?l=bugtraq&m=142722450701342&w=2	vendor-advisoryx_refsource_HP
http://www.openwall.com/lists/oss-security/2014/08/27/1	mailing-listx_refsource_MLIST
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.ubuntu.com/usn/USN-2356-1	vendor-advisoryx_refsource_UBUNTU
http://www.ubuntu.com/usn/USN-2355-1	vendor-advisoryx_refsource_UBUNTU
https://bugzilla.redhat.com/show_bug.cgi?id=1134099	x_refsource_CONFIRM
http://www.ubuntu.com/usn/USN-2357-1	vendor-advisoryx_refsource_UBUNTU
http://marc.info/?l=bugtraq&m=142722544401658&w=2	vendor-advisoryx_refsource_HP
http://rhn.redhat.com/errata/RHSA-2015-0803.html	vendor-advisoryx_refsource_REDHAT
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://seclists.org/oss-sec/2014/q3/450	mailing-listx_refsource_MLIST
http://www.ubuntu.com/usn/USN-2359-1	vendor-advisoryx_refsource_UBUNTU
http://www.ubuntu.com/usn/USN-2354-1	vendor-advisoryx_refsource_UBUNTU
http://rhn.redhat.com/errata/RHSA-2015-0782.html	vendor-advisoryx_refsource_REDHAT
http://www.ubuntu.com/usn/USN-2358-1	vendor-advisoryx_refsource_UBUNTU
https://github.com/torvalds/linux/commit/410dd3cf…	x_refsource_CONFIRM
https://code.google.com/p/google-security-researc…	x_refsource_MISC
http://www.securityfocus.com/bid/69396	vdb-entryx_refsource_BID
http://git.kernel.org/?p=linux/kernel/git/torvald…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2015-0102.html	vendor-advisoryx_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE

Date Public

2014-08-17 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T11:48:49.325Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2014:1318",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1318.html"
          },
          {
            "name": "RHSA-2015:0695",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0695.html"
          },
          {
            "name": "HPSBGN03285",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142722450701342\u0026w=2"
          },
          {
            "name": "[oss-security] 20140827 Re: CVE Request: Linux Kernel unbound recursion in ISOFS",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2014/08/27/1"
          },
          {
            "name": "SUSE-SU-2014:1316",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00006.html"
          },
          {
            "name": "USN-2356-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2356-1"
          },
          {
            "name": "USN-2355-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2355-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1134099"
          },
          {
            "name": "USN-2357-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2357-1"
          },
          {
            "name": "HPSBGN03282",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142722544401658\u0026w=2"
          },
          {
            "name": "RHSA-2015:0803",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0803.html"
          },
          {
            "name": "linux-kernel-isofs-bo(95481)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/95481"
          },
          {
            "name": "SUSE-SU-2014:1319",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00007.html"
          },
          {
            "name": "SUSE-SU-2015:0481",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html"
          },
          {
            "name": "openSUSE-SU-2015:0566",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html"
          },
          {
            "name": "[oss-security] 20140826 CVE Request: Linux Kernel unbound recursion in ISOFS",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://seclists.org/oss-sec/2014/q3/450"
          },
          {
            "name": "USN-2359-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2359-1"
          },
          {
            "name": "USN-2354-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2354-1"
          },
          {
            "name": "RHSA-2015:0782",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0782.html"
          },
          {
            "name": "USN-2358-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2358-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/410dd3cf4c9b36f27ed4542ee18b1af5e68645a4"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://code.google.com/p/google-security-research/issues/detail?id=88"
          },
          {
            "name": "69396",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/69396"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=410dd3cf4c9b36f27ed4542ee18b1af5e68645a4"
          },
          {
            "name": "RHSA-2015:0102",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0102.html"
          },
          {
            "name": "SUSE-SU-2015:0812",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-08-17T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Stack consumption vulnerability in the parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the Linux kernel through 3.16.1 allows local users to cause a denial of service (uncontrolled recursion, and system crash or reboot) via a crafted iso9660 image with a CL entry referring to a directory entry that has a CL entry."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-07T15:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "RHSA-2014:1318",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-1318.html"
        },
        {
          "name": "RHSA-2015:0695",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0695.html"
        },
        {
          "name": "HPSBGN03285",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142722450701342\u0026w=2"
        },
        {
          "name": "[oss-security] 20140827 Re: CVE Request: Linux Kernel unbound recursion in ISOFS",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2014/08/27/1"
        },
        {
          "name": "SUSE-SU-2014:1316",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00006.html"
        },
        {
          "name": "USN-2356-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2356-1"
        },
        {
          "name": "USN-2355-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2355-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1134099"
        },
        {
          "name": "USN-2357-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2357-1"
        },
        {
          "name": "HPSBGN03282",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142722544401658\u0026w=2"
        },
        {
          "name": "RHSA-2015:0803",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0803.html"
        },
        {
          "name": "linux-kernel-isofs-bo(95481)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/95481"
        },
        {
          "name": "SUSE-SU-2014:1319",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00007.html"
        },
        {
          "name": "SUSE-SU-2015:0481",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html"
        },
        {
          "name": "openSUSE-SU-2015:0566",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html"
        },
        {
          "name": "[oss-security] 20140826 CVE Request: Linux Kernel unbound recursion in ISOFS",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://seclists.org/oss-sec/2014/q3/450"
        },
        {
          "name": "USN-2359-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2359-1"
        },
        {
          "name": "USN-2354-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2354-1"
        },
        {
          "name": "RHSA-2015:0782",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0782.html"
        },
        {
          "name": "USN-2358-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2358-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/torvalds/linux/commit/410dd3cf4c9b36f27ed4542ee18b1af5e68645a4"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://code.google.com/p/google-security-research/issues/detail?id=88"
        },
        {
          "name": "69396",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/69396"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=410dd3cf4c9b36f27ed4542ee18b1af5e68645a4"
        },
        {
          "name": "RHSA-2015:0102",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0102.html"
        },
        {
          "name": "SUSE-SU-2015:0812",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2014-5471",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Stack consumption vulnerability in the parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the Linux kernel through 3.16.1 allows local users to cause a denial of service (uncontrolled recursion, and system crash or reboot) via a crafted iso9660 image with a CL entry referring to a directory entry that has a CL entry."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2014:1318",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-1318.html"
            },
            {
              "name": "RHSA-2015:0695",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0695.html"
            },
            {
              "name": "HPSBGN03285",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=142722450701342\u0026w=2"
            },
            {
              "name": "[oss-security] 20140827 Re: CVE Request: Linux Kernel unbound recursion in ISOFS",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2014/08/27/1"
            },
            {
              "name": "SUSE-SU-2014:1316",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00006.html"
            },
            {
              "name": "USN-2356-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2356-1"
            },
            {
              "name": "USN-2355-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2355-1"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1134099",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1134099"
            },
            {
              "name": "USN-2357-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2357-1"
            },
            {
              "name": "HPSBGN03282",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=142722544401658\u0026w=2"
            },
            {
              "name": "RHSA-2015:0803",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0803.html"
            },
            {
              "name": "linux-kernel-isofs-bo(95481)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/95481"
            },
            {
              "name": "SUSE-SU-2014:1319",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00007.html"
            },
            {
              "name": "SUSE-SU-2015:0481",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html"
            },
            {
              "name": "openSUSE-SU-2015:0566",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html"
            },
            {
              "name": "[oss-security] 20140826 CVE Request: Linux Kernel unbound recursion in ISOFS",
              "refsource": "MLIST",
              "url": "http://seclists.org/oss-sec/2014/q3/450"
            },
            {
              "name": "USN-2359-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2359-1"
            },
            {
              "name": "USN-2354-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2354-1"
            },
            {
              "name": "RHSA-2015:0782",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0782.html"
            },
            {
              "name": "USN-2358-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2358-1"
            },
            {
              "name": "https://github.com/torvalds/linux/commit/410dd3cf4c9b36f27ed4542ee18b1af5e68645a4",
              "refsource": "CONFIRM",
              "url": "https://github.com/torvalds/linux/commit/410dd3cf4c9b36f27ed4542ee18b1af5e68645a4"
            },
            {
              "name": "https://code.google.com/p/google-security-research/issues/detail?id=88",
              "refsource": "MISC",
              "url": "https://code.google.com/p/google-security-research/issues/detail?id=88"
            },
            {
              "name": "69396",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/69396"
            },
            {
              "name": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=410dd3cf4c9b36f27ed4542ee18b1af5e68645a4",
              "refsource": "CONFIRM",
              "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=410dd3cf4c9b36f27ed4542ee18b1af5e68645a4"
            },
            {
              "name": "RHSA-2015:0102",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0102.html"
            },
            {
              "name": "SUSE-SU-2015:0812",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2014-5471",
    "datePublished": "2014-09-01T01:00:00.000Z",
    "dateReserved": "2014-08-26T00:00:00.000Z",
    "dateUpdated": "2024-08-06T11:48:49.325Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2014-5472 (GCVE-0-2014-5472)

Vulnerability from cvelistv5 – Published: 2014-09-01 01:00 – Updated: 2024-08-06 11:48

Summary

The parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the Linux kernel through 3.16.1 allows local users to cause a denial of service (unkillable mount process) via a crafted iso9660 image with a self-referential CL entry.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

25 references

URL	Tags
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
http://www.securityfocus.com/bid/69428	vdb-entryx_refsource_BID
http://rhn.redhat.com/errata/RHSA-2014-1318.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-0695.html	vendor-advisoryx_refsource_REDHAT
http://marc.info/?l=bugtraq&m=142722450701342&w=2	vendor-advisoryx_refsource_HP
http://www.openwall.com/lists/oss-security/2014/08/27/1	mailing-listx_refsource_MLIST
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.ubuntu.com/usn/USN-2356-1	vendor-advisoryx_refsource_UBUNTU
http://www.ubuntu.com/usn/USN-2355-1	vendor-advisoryx_refsource_UBUNTU
https://bugzilla.redhat.com/show_bug.cgi?id=1134099	x_refsource_CONFIRM
http://www.ubuntu.com/usn/USN-2357-1	vendor-advisoryx_refsource_UBUNTU
http://marc.info/?l=bugtraq&m=142722544401658&w=2	vendor-advisoryx_refsource_HP
http://rhn.redhat.com/errata/RHSA-2015-0803.html	vendor-advisoryx_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.ubuntu.com/usn/USN-2359-1	vendor-advisoryx_refsource_UBUNTU
http://www.ubuntu.com/usn/USN-2354-1	vendor-advisoryx_refsource_UBUNTU
http://rhn.redhat.com/errata/RHSA-2015-0782.html	vendor-advisoryx_refsource_REDHAT
http://www.ubuntu.com/usn/USN-2358-1	vendor-advisoryx_refsource_UBUNTU
https://github.com/torvalds/linux/commit/410dd3cf…	x_refsource_CONFIRM
https://code.google.com/p/google-security-researc…	x_refsource_MISC
http://git.kernel.org/?p=linux/kernel/git/torvald…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2015-0102.html	vendor-advisoryx_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE

Date Public

2014-08-27 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T11:48:48.479Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "linux-kernel-cve20145472-dos(95556)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/95556"
          },
          {
            "name": "69428",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/69428"
          },
          {
            "name": "RHSA-2014:1318",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1318.html"
          },
          {
            "name": "RHSA-2015:0695",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0695.html"
          },
          {
            "name": "HPSBGN03285",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142722450701342\u0026w=2"
          },
          {
            "name": "[oss-security] 20140827 Re: CVE Request: Linux Kernel unbound recursion in ISOFS",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2014/08/27/1"
          },
          {
            "name": "SUSE-SU-2014:1316",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00006.html"
          },
          {
            "name": "USN-2356-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2356-1"
          },
          {
            "name": "USN-2355-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2355-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1134099"
          },
          {
            "name": "USN-2357-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2357-1"
          },
          {
            "name": "HPSBGN03282",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142722544401658\u0026w=2"
          },
          {
            "name": "RHSA-2015:0803",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0803.html"
          },
          {
            "name": "SUSE-SU-2014:1319",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00007.html"
          },
          {
            "name": "SUSE-SU-2015:0481",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html"
          },
          {
            "name": "openSUSE-SU-2015:0566",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html"
          },
          {
            "name": "USN-2359-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2359-1"
          },
          {
            "name": "USN-2354-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2354-1"
          },
          {
            "name": "RHSA-2015:0782",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0782.html"
          },
          {
            "name": "USN-2358-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2358-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/410dd3cf4c9b36f27ed4542ee18b1af5e68645a4"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://code.google.com/p/google-security-research/issues/detail?id=88"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=410dd3cf4c9b36f27ed4542ee18b1af5e68645a4"
          },
          {
            "name": "RHSA-2015:0102",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0102.html"
          },
          {
            "name": "SUSE-SU-2015:0812",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-08-27T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the Linux kernel through 3.16.1 allows local users to cause a denial of service (unkillable mount process) via a crafted iso9660 image with a self-referential CL entry."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-07T15:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "linux-kernel-cve20145472-dos(95556)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/95556"
        },
        {
          "name": "69428",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/69428"
        },
        {
          "name": "RHSA-2014:1318",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-1318.html"
        },
        {
          "name": "RHSA-2015:0695",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0695.html"
        },
        {
          "name": "HPSBGN03285",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142722450701342\u0026w=2"
        },
        {
          "name": "[oss-security] 20140827 Re: CVE Request: Linux Kernel unbound recursion in ISOFS",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2014/08/27/1"
        },
        {
          "name": "SUSE-SU-2014:1316",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00006.html"
        },
        {
          "name": "USN-2356-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2356-1"
        },
        {
          "name": "USN-2355-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2355-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1134099"
        },
        {
          "name": "USN-2357-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2357-1"
        },
        {
          "name": "HPSBGN03282",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142722544401658\u0026w=2"
        },
        {
          "name": "RHSA-2015:0803",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0803.html"
        },
        {
          "name": "SUSE-SU-2014:1319",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00007.html"
        },
        {
          "name": "SUSE-SU-2015:0481",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html"
        },
        {
          "name": "openSUSE-SU-2015:0566",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html"
        },
        {
          "name": "USN-2359-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2359-1"
        },
        {
          "name": "USN-2354-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2354-1"
        },
        {
          "name": "RHSA-2015:0782",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0782.html"
        },
        {
          "name": "USN-2358-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2358-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/torvalds/linux/commit/410dd3cf4c9b36f27ed4542ee18b1af5e68645a4"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://code.google.com/p/google-security-research/issues/detail?id=88"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=410dd3cf4c9b36f27ed4542ee18b1af5e68645a4"
        },
        {
          "name": "RHSA-2015:0102",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0102.html"
        },
        {
          "name": "SUSE-SU-2015:0812",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2014-5472",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the Linux kernel through 3.16.1 allows local users to cause a denial of service (unkillable mount process) via a crafted iso9660 image with a self-referential CL entry."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "linux-kernel-cve20145472-dos(95556)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/95556"
            },
            {
              "name": "69428",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/69428"
            },
            {
              "name": "RHSA-2014:1318",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-1318.html"
            },
            {
              "name": "RHSA-2015:0695",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0695.html"
            },
            {
              "name": "HPSBGN03285",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=142722450701342\u0026w=2"
            },
            {
              "name": "[oss-security] 20140827 Re: CVE Request: Linux Kernel unbound recursion in ISOFS",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2014/08/27/1"
            },
            {
              "name": "SUSE-SU-2014:1316",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00006.html"
            },
            {
              "name": "USN-2356-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2356-1"
            },
            {
              "name": "USN-2355-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2355-1"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1134099",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1134099"
            },
            {
              "name": "USN-2357-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2357-1"
            },
            {
              "name": "HPSBGN03282",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=142722544401658\u0026w=2"
            },
            {
              "name": "RHSA-2015:0803",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0803.html"
            },
            {
              "name": "SUSE-SU-2014:1319",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00007.html"
            },
            {
              "name": "SUSE-SU-2015:0481",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html"
            },
            {
              "name": "openSUSE-SU-2015:0566",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html"
            },
            {
              "name": "USN-2359-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2359-1"
            },
            {
              "name": "USN-2354-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2354-1"
            },
            {
              "name": "RHSA-2015:0782",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0782.html"
            },
            {
              "name": "USN-2358-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2358-1"
            },
            {
              "name": "https://github.com/torvalds/linux/commit/410dd3cf4c9b36f27ed4542ee18b1af5e68645a4",
              "refsource": "CONFIRM",
              "url": "https://github.com/torvalds/linux/commit/410dd3cf4c9b36f27ed4542ee18b1af5e68645a4"
            },
            {
              "name": "https://code.google.com/p/google-security-research/issues/detail?id=88",
              "refsource": "MISC",
              "url": "https://code.google.com/p/google-security-research/issues/detail?id=88"
            },
            {
              "name": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=410dd3cf4c9b36f27ed4542ee18b1af5e68645a4",
              "refsource": "CONFIRM",
              "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=410dd3cf4c9b36f27ed4542ee18b1af5e68645a4"
            },
            {
              "name": "RHSA-2015:0102",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0102.html"
            },
            {
              "name": "SUSE-SU-2015:0812",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2014-5472",
    "datePublished": "2014-09-01T01:00:00.000Z",
    "dateReserved": "2014-08-26T00:00:00.000Z",
    "dateUpdated": "2024-08-06T11:48:48.479Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2014-6410 (GCVE-0-2014-6410)

Vulnerability from cvelistv5 – Published: 2014-09-28 10:00 – Updated: 2024-08-06 12:17

Summary

The __udf_read_inode function in fs/udf/inode.c in the Linux kernel through 3.16.3 does not restrict the amount of ICB indirection, which allows physically proximate attackers to cause a denial of service (infinite loop or stack consumption) via a UDF filesystem with a crafted inode.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

16 references

URL	Tags
http://www.ubuntu.com/usn/USN-2377-1	vendor-advisoryx_refsource_UBUNTU
http://rhn.redhat.com/errata/RHSA-2014-1318.html	vendor-advisoryx_refsource_REDHAT
http://marc.info/?l=bugtraq&m=142722450701342&w=2	vendor-advisoryx_refsource_HP
http://www.ubuntu.com/usn/USN-2375-1	vendor-advisoryx_refsource_UBUNTU
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.openwall.com/lists/oss-security/2014/09/15/9	mailing-listx_refsource_MLIST
http://marc.info/?l=bugtraq&m=142722544401658&w=2	vendor-advisoryx_refsource_HP
http://www.securityfocus.com/bid/69799	vdb-entryx_refsource_BID
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.ubuntu.com/usn/USN-2378-1	vendor-advisoryx_refsource_UBUNTU
http://git.kernel.org/?p=linux/kernel/git/torvald…	x_refsource_CONFIRM
http://www.ubuntu.com/usn/USN-2374-1	vendor-advisoryx_refsource_UBUNTU
https://bugzilla.redhat.com/show_bug.cgi?id=1141809	x_refsource_CONFIRM
https://github.com/torvalds/linux/commit/c03aa9f6…	x_refsource_CONFIRM
http://www.ubuntu.com/usn/USN-2379-1	vendor-advisoryx_refsource_UBUNTU
http://www.ubuntu.com/usn/USN-2376-1	vendor-advisoryx_refsource_UBUNTU

Date Public

2014-09-15 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T12:17:23.711Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "USN-2377-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2377-1"
          },
          {
            "name": "RHSA-2014:1318",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1318.html"
          },
          {
            "name": "HPSBGN03285",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142722450701342\u0026w=2"
          },
          {
            "name": "USN-2375-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2375-1"
          },
          {
            "name": "SUSE-SU-2014:1316",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00006.html"
          },
          {
            "name": "[oss-security] 20140915 Re: CVE request for Linux kernel: udf: Avoid infinite loop when processing indirect ICBs",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2014/09/15/9"
          },
          {
            "name": "HPSBGN03282",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142722544401658\u0026w=2"
          },
          {
            "name": "69799",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/69799"
          },
          {
            "name": "SUSE-SU-2014:1319",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00007.html"
          },
          {
            "name": "USN-2378-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2378-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=c03aa9f6e1f938618e6db2e23afef0574efeeb65"
          },
          {
            "name": "USN-2374-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2374-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1141809"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/c03aa9f6e1f938618e6db2e23afef0574efeeb65"
          },
          {
            "name": "USN-2379-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2379-1"
          },
          {
            "name": "USN-2376-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2376-1"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-09-15T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The __udf_read_inode function in fs/udf/inode.c in the Linux kernel through 3.16.3 does not restrict the amount of ICB indirection, which allows physically proximate attackers to cause a denial of service (infinite loop or stack consumption) via a UDF filesystem with a crafted inode."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-08-19T15:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "USN-2377-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2377-1"
        },
        {
          "name": "RHSA-2014:1318",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-1318.html"
        },
        {
          "name": "HPSBGN03285",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142722450701342\u0026w=2"
        },
        {
          "name": "USN-2375-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2375-1"
        },
        {
          "name": "SUSE-SU-2014:1316",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00006.html"
        },
        {
          "name": "[oss-security] 20140915 Re: CVE request for Linux kernel: udf: Avoid infinite loop when processing indirect ICBs",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2014/09/15/9"
        },
        {
          "name": "HPSBGN03282",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142722544401658\u0026w=2"
        },
        {
          "name": "69799",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/69799"
        },
        {
          "name": "SUSE-SU-2014:1319",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00007.html"
        },
        {
          "name": "USN-2378-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2378-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=c03aa9f6e1f938618e6db2e23afef0574efeeb65"
        },
        {
          "name": "USN-2374-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2374-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1141809"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/torvalds/linux/commit/c03aa9f6e1f938618e6db2e23afef0574efeeb65"
        },
        {
          "name": "USN-2379-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2379-1"
        },
        {
          "name": "USN-2376-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2376-1"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2014-6410",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The __udf_read_inode function in fs/udf/inode.c in the Linux kernel through 3.16.3 does not restrict the amount of ICB indirection, which allows physically proximate attackers to cause a denial of service (infinite loop or stack consumption) via a UDF filesystem with a crafted inode."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "USN-2377-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2377-1"
            },
            {
              "name": "RHSA-2014:1318",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-1318.html"
            },
            {
              "name": "HPSBGN03285",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=142722450701342\u0026w=2"
            },
            {
              "name": "USN-2375-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2375-1"
            },
            {
              "name": "SUSE-SU-2014:1316",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00006.html"
            },
            {
              "name": "[oss-security] 20140915 Re: CVE request for Linux kernel: udf: Avoid infinite loop when processing indirect ICBs",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2014/09/15/9"
            },
            {
              "name": "HPSBGN03282",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=142722544401658\u0026w=2"
            },
            {
              "name": "69799",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/69799"
            },
            {
              "name": "SUSE-SU-2014:1319",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00007.html"
            },
            {
              "name": "USN-2378-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2378-1"
            },
            {
              "name": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=c03aa9f6e1f938618e6db2e23afef0574efeeb65",
              "refsource": "CONFIRM",
              "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=c03aa9f6e1f938618e6db2e23afef0574efeeb65"
            },
            {
              "name": "USN-2374-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2374-1"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1141809",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1141809"
            },
            {
              "name": "https://github.com/torvalds/linux/commit/c03aa9f6e1f938618e6db2e23afef0574efeeb65",
              "refsource": "CONFIRM",
              "url": "https://github.com/torvalds/linux/commit/c03aa9f6e1f938618e6db2e23afef0574efeeb65"
            },
            {
              "name": "USN-2379-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2379-1"
            },
            {
              "name": "USN-2376-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2376-1"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2014-6410",
    "datePublished": "2014-09-28T10:00:00.000Z",
    "dateReserved": "2014-09-15T00:00:00.000Z",
    "dateUpdated": "2024-08-06T12:17:23.711Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2014-9322 (GCVE-0-2014-9322)

Vulnerability from cvelistv5 – Published: 2014-12-17 11:00 – Updated: 2024-08-06 13:40

Summary

arch/x86/kernel/entry_64.S in the Linux kernel before 3.17.5 does not properly handle faults associated with the Stack Segment (SS) segment register, which allows local users to gain privileges by triggering an IRET instruction that leads to access to a GS Base address from the wrong space.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

22 references

URL	Tags
http://www.ubuntu.com/usn/USN-2491-1	vendor-advisoryx_refsource_UBUNTU
http://marc.info/?l=bugtraq&m=142722450701342&w=2	vendor-advisoryx_refsource_HP
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://www.kernel.org/pub/linux/kernel/v3.x/Chan…	x_refsource_CONFIRM
https://bugzilla.redhat.com/show_bug.cgi?id=1172806	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2015-0009.html	vendor-advisoryx_refsource_REDHAT
http://marc.info/?l=bugtraq&m=142722544401658&w=2	vendor-advisoryx_refsource_HP
https://help.joyent.com/entries/98788667-Security…	x_refsource_CONFIRM
http://www.zerodayinitiative.com/advisories/ZDI-16-170	x_refsource_MISC
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://rhn.redhat.com/errata/RHSA-2014-2008.html	vendor-advisoryx_refsource_REDHAT
https://github.com/torvalds/linux/commit/6f442be2…	x_refsource_CONFIRM
http://secunia.com/advisories/62336	third-party-advisoryx_refsource_SECUNIA
http://git.kernel.org/?p=linux/kernel/git/torvald…	x_refsource_CONFIRM
http://source.android.com/security/bulletin/2016-…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2014-1998.html	vendor-advisoryx_refsource_REDHAT
http://www.exploit-db.com/exploits/36266	exploitx_refsource_EXPLOIT-DB
http://rhn.redhat.com/errata/RHSA-2014-2028.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2014-2031.html	vendor-advisoryx_refsource_REDHAT
http://osvdb.org/show/osvdb/115919	vdb-entryx_refsource_OSVDB
http://www.openwall.com/lists/oss-security/2014/12/15/6	mailing-listx_refsource_MLIST
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE

Date Public

2014-12-15 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T13:40:25.229Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "USN-2491-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2491-1"
          },
          {
            "name": "HPSBGN03285",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142722450701342\u0026w=2"
          },
          {
            "name": "SUSE-SU-2015:0736",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.17.5"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1172806"
          },
          {
            "name": "RHSA-2015:0009",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0009.html"
          },
          {
            "name": "HPSBGN03282",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142722544401658\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://help.joyent.com/entries/98788667-Security-Advisory-ZDI-CAN-3263-ZDI-CAN-3284-and-ZDI-CAN-3364-Vulnerabilities"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.zerodayinitiative.com/advisories/ZDI-16-170"
          },
          {
            "name": "openSUSE-SU-2015:0566",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html"
          },
          {
            "name": "RHSA-2014:2008",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-2008.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/6f442be2fb22be02cafa606f1769fa1e6f894441"
          },
          {
            "name": "62336",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/62336"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6f442be2fb22be02cafa606f1769fa1e6f894441"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://source.android.com/security/bulletin/2016-04-02.html"
          },
          {
            "name": "RHSA-2014:1998",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1998.html"
          },
          {
            "name": "36266",
            "tags": [
              "exploit",
              "x_refsource_EXPLOIT-DB",
              "x_transferred"
            ],
            "url": "http://www.exploit-db.com/exploits/36266"
          },
          {
            "name": "RHSA-2014:2028",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-2028.html"
          },
          {
            "name": "RHSA-2014:2031",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-2031.html"
          },
          {
            "name": "115919",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/show/osvdb/115919"
          },
          {
            "name": "[oss-security] 20141215 Linux kernel: multiple x86_64 vulnerabilities",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2014/12/15/6"
          },
          {
            "name": "SUSE-SU-2015:0812",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-12-15T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "arch/x86/kernel/entry_64.S in the Linux kernel before 3.17.5 does not properly handle faults associated with the Stack Segment (SS) segment register, which allows local users to gain privileges by triggering an IRET instruction that leads to access to a GS Base address from the wrong space."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-11-09T18:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "USN-2491-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2491-1"
        },
        {
          "name": "HPSBGN03285",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142722450701342\u0026w=2"
        },
        {
          "name": "SUSE-SU-2015:0736",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.17.5"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1172806"
        },
        {
          "name": "RHSA-2015:0009",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0009.html"
        },
        {
          "name": "HPSBGN03282",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142722544401658\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://help.joyent.com/entries/98788667-Security-Advisory-ZDI-CAN-3263-ZDI-CAN-3284-and-ZDI-CAN-3364-Vulnerabilities"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.zerodayinitiative.com/advisories/ZDI-16-170"
        },
        {
          "name": "openSUSE-SU-2015:0566",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html"
        },
        {
          "name": "RHSA-2014:2008",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-2008.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/torvalds/linux/commit/6f442be2fb22be02cafa606f1769fa1e6f894441"
        },
        {
          "name": "62336",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/62336"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6f442be2fb22be02cafa606f1769fa1e6f894441"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://source.android.com/security/bulletin/2016-04-02.html"
        },
        {
          "name": "RHSA-2014:1998",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-1998.html"
        },
        {
          "name": "36266",
          "tags": [
            "exploit",
            "x_refsource_EXPLOIT-DB"
          ],
          "url": "http://www.exploit-db.com/exploits/36266"
        },
        {
          "name": "RHSA-2014:2028",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-2028.html"
        },
        {
          "name": "RHSA-2014:2031",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-2031.html"
        },
        {
          "name": "115919",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/show/osvdb/115919"
        },
        {
          "name": "[oss-security] 20141215 Linux kernel: multiple x86_64 vulnerabilities",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2014/12/15/6"
        },
        {
          "name": "SUSE-SU-2015:0812",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2014-9322",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "arch/x86/kernel/entry_64.S in the Linux kernel before 3.17.5 does not properly handle faults associated with the Stack Segment (SS) segment register, which allows local users to gain privileges by triggering an IRET instruction that leads to access to a GS Base address from the wrong space."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "USN-2491-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2491-1"
            },
            {
              "name": "HPSBGN03285",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=142722450701342\u0026w=2"
            },
            {
              "name": "SUSE-SU-2015:0736",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html"
            },
            {
              "name": "https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.17.5",
              "refsource": "CONFIRM",
              "url": "https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.17.5"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1172806",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1172806"
            },
            {
              "name": "RHSA-2015:0009",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0009.html"
            },
            {
              "name": "HPSBGN03282",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=142722544401658\u0026w=2"
            },
            {
              "name": "https://help.joyent.com/entries/98788667-Security-Advisory-ZDI-CAN-3263-ZDI-CAN-3284-and-ZDI-CAN-3364-Vulnerabilities",
              "refsource": "CONFIRM",
              "url": "https://help.joyent.com/entries/98788667-Security-Advisory-ZDI-CAN-3263-ZDI-CAN-3284-and-ZDI-CAN-3364-Vulnerabilities"
            },
            {
              "name": "http://www.zerodayinitiative.com/advisories/ZDI-16-170",
              "refsource": "MISC",
              "url": "http://www.zerodayinitiative.com/advisories/ZDI-16-170"
            },
            {
              "name": "openSUSE-SU-2015:0566",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html"
            },
            {
              "name": "RHSA-2014:2008",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-2008.html"
            },
            {
              "name": "https://github.com/torvalds/linux/commit/6f442be2fb22be02cafa606f1769fa1e6f894441",
              "refsource": "CONFIRM",
              "url": "https://github.com/torvalds/linux/commit/6f442be2fb22be02cafa606f1769fa1e6f894441"
            },
            {
              "name": "62336",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/62336"
            },
            {
              "name": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=6f442be2fb22be02cafa606f1769fa1e6f894441",
              "refsource": "CONFIRM",
              "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=6f442be2fb22be02cafa606f1769fa1e6f894441"
            },
            {
              "name": "http://source.android.com/security/bulletin/2016-04-02.html",
              "refsource": "CONFIRM",
              "url": "http://source.android.com/security/bulletin/2016-04-02.html"
            },
            {
              "name": "RHSA-2014:1998",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-1998.html"
            },
            {
              "name": "36266",
              "refsource": "EXPLOIT-DB",
              "url": "http://www.exploit-db.com/exploits/36266"
            },
            {
              "name": "RHSA-2014:2028",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-2028.html"
            },
            {
              "name": "RHSA-2014:2031",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-2031.html"
            },
            {
              "name": "115919",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/show/osvdb/115919"
            },
            {
              "name": "[oss-security] 20141215 Linux kernel: multiple x86_64 vulnerabilities",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2014/12/15/6"
            },
            {
              "name": "SUSE-SU-2015:0812",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2014-9322",
    "datePublished": "2014-12-17T11:00:00.000Z",
    "dateReserved": "2014-12-07T00:00:00.000Z",
    "dateUpdated": "2024-08-06T13:40:25.229Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

RHSA-2014_1997

CVE-2012-6657 (GCVE-0-2012-6657)

CVE-2014-3673 (GCVE-0-2014-3673)

CVE-2014-3687 (GCVE-0-2014-3687)

CVE-2014-3688 (GCVE-0-2014-3688)

CVE-2014-5471 (GCVE-0-2014-5471)

CVE-2014-5472 (GCVE-0-2014-5472)

CVE-2014-6410 (GCVE-0-2014-6410)

CVE-2014-9322 (GCVE-0-2014-9322)

Tags

Sightings

Nomenclature

Related by attack behaviour