CVEvulnerability

CVE-2014-3917

3.3 LOW Published 2014-06-05 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-06-05
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
3.3 LOW — AV:L/AC:M/Au:N/C:P/I:N/A:P
Weaknesses
CWE-200

Description

kernel/auditsc.c in the Linux kernel through 3.14.5, when CONFIG_AUDITSYSCALL is enabled with certain syscall rules, allows local users to obtain potentially sensitive single-bit values from kernel memory or cause a denial of service (OOPS) via a large value of a syscall number.

Affected configurations

• suse linux enterprise desktop 10.0 • redhat enterprise linux 5 • redhat enterprise linux 6.0 • redhat enterprise mrg 2.0 • linux linux kernel (<= 3.14.5) • linux linux kernel 3.14 • linux linux kernel 3.14.1 • linux linux kernel 3.14.2 • linux linux kernel 3.14.3 • linux linux kernel 3.14.4

Related

Weakness · CWE (1)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness

References