PT-2014-4443 · Linux+3 · Linux Kernel+3

Scott Mayhew

+1

·

Published

2014-02-16

·

Updated

2023-02-13

·

CVE-2014-2038

CVSS v2.0

2.1

Low

VectorAV:L/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.13.3
Description The issue allows local users to obtain sensitive information from kernel memory under certain circumstances. This is due to the nfs can extend write function relying on a write delegation to extend a write operation without proper verification. The exploitation involves writing to a file in an NFS filesystem and then reading the same file.
Recommendations For Linux kernel versions prior to 3.13.3, update to version 3.13.3 or later to resolve the issue.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

ALT-PU-2014-1198
ALT-PU-2014-2064
CESA-2014_0328
CVE-2014-2038
MGASA-2014-0103
RHSA-2014:0328
RHSA-2014_0328
USN-2137-1
USN-2140-1

Affected Products

Alt Linux
Centos
Linux Kernel
Red Hat