CVE-2014-8159
CVSS v2.0
6.9 (Medium)
EPSS
0.04 % (11th)
Affected Products
3
Advisories
40
NVD Status
Analyzed
The InfiniBand (IB) implementation in the Linux kernel package before 2.6.32-504.12.2 on Red Hat Enterprise Linux (RHEL) 6 does not properly restrict use of User Verbs for registration of memory regions, which allows local users to access arbitrary physical memory locations, and consequently cause a denial of service (system crash) or gain privileges, by leveraging permissions on a uverbs device under /dev/infiniband/.
Weaknesses
- CWE-264
- Permissions, Privileges, and Access Controls
- CVE Status
- PUBLISHED
- NVD Status
- Analyzed
- CNA
- Red Hat, Inc.
- Published Date
-
2015-03-16 10:59:01
(9 years ago) - Updated Date
-
2024-06-06 19:46:16
(3 months ago)
Affected Products
Loading...
Loading...
Configuration #1
|
Configuration #2
|
Configuration #3
|
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...