VDB

DEBIAN-CVE-2014-0069

DEBIAN-CVE-2014-0069 PUBLISHED CVSS 8.600000381469727 HIGH

The cifs_iovec_write function in fs/cifs/file.c in the Linux kernel through 3.13.5 does not properly handle uncached write operations that copy fewer than the requested number of bytes, which allows local users to obtain sensitive information from kernel memory, cause a denial of service (memory corruption and system crash), or possibly gain privileges via a writev system call with a crafted pointer.

Risk Scores

CVSS v4.0
8.600000381469727
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Affected Products

VendorProductVersions
Debian:11linux0, 0, 0
Debian:13linux0, 0, 0
Debian:14linux0, 0, 0
Debian:12linux0, 0, 0

Timeline

  • Feb 28, 2014 CVE Published
  • Apr 28, 2026 CVE Updated
Open in Interactive Console →
$ Console Community · 100/wk Open console ›