Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2014-1446

Опубликовано: 18 янв. 2014
Источник: nvd
CVSS2: 1.9
EPSS Низкий

Описание

The yam_ioctl function in drivers/net/hamradio/yam.c in the Linux kernel before 3.12.8 does not initialize a certain structure member, which allows local users to obtain sensitive information from kernel memory by leveraging the CAP_NET_ADMIN capability for an SIOCYAMGCFG ioctl call.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Версия до 3.12.7 (включая)
cpe:2.3:o:linux:linux_kernel:3.12:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:3.12.1:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:3.12.2:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:3.12.3:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:3.12.4:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:3.12.5:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:3.12.6:*:*:*:*:*:*:*

EPSS

Процентиль: 51%
0.00649
Низкий

1.9 Low

CVSS2

Дефекты

CWE-399

Связанные уязвимости

ubuntu
почти 13 лет назад

The yam_ioctl function in drivers/net/hamradio/yam.c in the Linux kernel before 3.12.8 does not initialize a certain structure member, which allows local users to obtain sensitive information from kernel memory by leveraging the CAP_NET_ADMIN capability for an SIOCYAMGCFG ioctl call.

redhat
почти 13 лет назад

The yam_ioctl function in drivers/net/hamradio/yam.c in the Linux kernel before 3.12.8 does not initialize a certain structure member, which allows local users to obtain sensitive information from kernel memory by leveraging the CAP_NET_ADMIN capability for an SIOCYAMGCFG ioctl call.

debian
почти 13 лет назад

The yam_ioctl function in drivers/net/hamradio/yam.c in the Linux kern ...

github
больше 4 лет назад

The yam_ioctl function in drivers/net/hamradio/yam.c in the Linux kernel before 3.12.8 does not initialize a certain structure member, which allows local users to obtain sensitive information from kernel memory by leveraging the CAP_NET_ADMIN capability for an SIOCYAMGCFG ioctl call.

altlinux
почти 13 лет назад

ALT-PU-2014-1065: package `kernel-image-un-def` update to version 3.12.8-alt1

EPSS

Процентиль: 51%
0.00649
Низкий

1.9 Low

CVSS2

Дефекты

CWE-399