CVE-2014-3917

CVSS v2.0 3.3 (Low)

EPSS 0.04 % (5^th)

Affected Products 4

Advisories 55

kernel/auditsc.c in the Linux kernel through 3.14.5, when CONFIG_AUDITSYSCALL is enabled with certain syscall rules, allows local users to obtain potentially sensitive single-bit values from kernel memory or cause a denial of service (OOPS) via a large value of a syscall number.

Weaknesses

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

CVE Status: PUBLISHED
CNA: MITRE
Published Date: 2014-06-05 17:55:07
(10 years ago)
Updated Date: 2021-07-15 19:16:09
(3 years ago)

Affected Products

Linux

Linux Kernel

Redhat

Suse

Linux Enterprise Desktop

Configuration #1

		CPE23	From	Up To
	Suse Linux Enterprise Desktop 10.0 SP4	cpe:2.3:o:suse:linux_enterprise_desktop:10.0:sp4:::lts

Configuration #2

		CPE23	From	Up To
	Redhat Enterprise Linux 5	cpe:2.3:o:redhat:enterprise_linux:5
	Redhat Enterprise Linux 6.0	cpe:2.3:o:redhat:enterprise_linux:6.0
	Redhat Enterprise Mrg 2.0	cpe:2.3:o:redhat:enterprise_mrg:2.0

Configuration #3

	CPE23	Up To
Linux Kernel 3.14.5 and prior versions	cpe:2.3:o:linux:linux_kernel	<= 3.14.5
Linux Kernel 3.14	cpe:2.3:o:linux:linux_kernel:3.14:-
Linux Kernel 3.14 Rc1	cpe:2.3:o:linux:linux_kernel:3.14:rc1
Linux Kernel 3.14 Rc2	cpe:2.3:o:linux:linux_kernel:3.14:rc2
Linux Kernel 3.14 Rc3	cpe:2.3:o:linux:linux_kernel:3.14:rc3
Linux Kernel 3.14 Rc4	cpe:2.3:o:linux:linux_kernel:3.14:rc4
Linux Kernel 3.14 Rc5	cpe:2.3:o:linux:linux_kernel:3.14:rc5
Linux Kernel 3.14 Rc6	cpe:2.3:o:linux:linux_kernel:3.14:rc6
Linux Kernel 3.14 Rc7	cpe:2.3:o:linux:linux_kernel:3.14:rc7
Linux Kernel 3.14 Rc8	cpe:2.3:o:linux:linux_kernel:3.14:rc8
Linux Kernel 3.14.1	cpe:2.3:o:linux:linux_kernel:3.14.1
Linux Kernel 3.14.2	cpe:2.3:o:linux:linux_kernel:3.14.2
Linux Kernel 3.14.3	cpe:2.3:o:linux:linux_kernel:3.14.3
Linux Kernel 3.14.4	cpe:2.3:o:linux:linux_kernel:3.14.4