PT-2019-7143 · Red Hat · Red Hat

Published 2019-11-06 · Updated 2021-07-15 · CVE-2014-8181

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Red Hat Enterprise Linux versions 7

Description The kernel does not clear garbage data for the SG IO buffer, which may lead to leaking sensitive information to userspace.

Recommendations For Red Hat Enterprise Linux version 7, update the kernel to a version that includes the fix for this issue.

Fix

Improper Initialization

Weakness Enumeration

CWE-665

Related Identifiers

CVE-2014-8181

Affected Products

Red Hat

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2014-8181 · Security Note
• https://bugzilla.redhat.com/show_bug.cgi?id=1335817 · Note