CVE-2014-3917

kernel/auditsc.c in the Linux kernel through 3.14.5, when CONFIG_AUDITSYSCALL is enabled with certain syscall rules, allows local users to obtain potentially sensitive single-bit values from kernel memory or cause a denial of service (OOPS) via a large value of a syscall number.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
3.3 UNKNOWN
LOCAL
MEDIUM
AV:L/AC:M/Au:N/C:P/I:N/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 25%
Affected Products (NVD)
VendorProductVersion
suselinux_enterprise_desktop
10.0:sp4
redhatenterprise_linux
6.0
redhatenterprise_mrg
2.0
linuxlinux_kernel
𝑥
≤ 3.14.5
linuxlinux_kernel
3.14
linuxlinux_kernel
3.14:rc1
linuxlinux_kernel
3.14:rc2
linuxlinux_kernel
3.14:rc3
linuxlinux_kernel
3.14:rc4
linuxlinux_kernel
3.14:rc5
linuxlinux_kernel
3.14:rc6
linuxlinux_kernel
3.14:rc7
linuxlinux_kernel
3.14:rc8
linuxlinux_kernel
3.14.1
linuxlinux_kernel
3.14.2
linuxlinux_kernel
3.14.3
linuxlinux_kernel
3.14.4
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
linux
bookworm
6.1.106-3
fixed
bookworm (security)
6.1.112-1
fixed
bullseye
5.10.223-1
fixed
bullseye (security)
5.10.226-1
fixed
sid
6.11.6-1
fixed
trixie
6.11.5-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
linux
lucid
Fixed 2.6.32-64.128
released
precise
Fixed 3.2.0-68.102
released
saucy
Fixed 3.11.0-26.45
released
trusty
Fixed 3.13.0-33.58
released
utopic
not-affected
vivid
not-affected
wily
not-affected
xenial
not-affected
yakkety
not-affected
zesty
not-affected
linux-armadaxp
lucid
dne
precise
Fixed 3.2.0-1637.54
released
saucy
dne
trusty
dne
utopic
dne
vivid
dne
wily
dne
xenial
dne
yakkety
dne
zesty
dne
linux-aws
precise
dne
trusty
not-affected
xenial
not-affected
yakkety
dne
zesty
dne
linux-ec2
lucid
Fixed 2.6.32-368.84
released
precise
dne
saucy
dne
trusty
dne
utopic
dne
vivid
dne
wily
dne
xenial
dne
yakkety
dne
zesty
dne
linux-flo
lucid
dne
precise
dne
saucy
dne
trusty
ignored
utopic
not-affected
vivid
not-affected
wily
not-affected
xenial
not-affected
yakkety
not-affected
zesty
dne
linux-fsl-imx51
lucid
ignored
precise
dne
saucy
dne
trusty
dne
utopic
dne
vivid
dne
wily
dne
xenial
dne
yakkety
dne
zesty
dne
linux-gke
precise
dne
trusty
dne
xenial
not-affected
yakkety
dne
zesty
dne
linux-goldfish
lucid
dne
precise
dne
saucy
ignored
trusty
ignored
utopic
not-affected
vivid
not-affected
wily
not-affected
xenial
not-affected
yakkety
not-affected
zesty
not-affected
linux-grouper
lucid
dne
precise
dne
saucy
ignored
trusty
dne
utopic
ignored
vivid
dne
wily
dne
xenial
dne
yakkety
dne
zesty
dne
linux-hwe
precise
dne
trusty
dne
xenial
not-affected
yakkety
dne
zesty
dne
linux-hwe-edge
precise
dne
trusty
dne
xenial
not-affected
yakkety
dne
zesty
dne
linux-linaro-omap
lucid
dne
precise
ignored
saucy
dne
trusty
dne
utopic
dne
vivid
dne
wily
dne
xenial
dne
yakkety
dne
zesty
dne
linux-linaro-shared
lucid
dne
precise
ignored
saucy
dne
trusty
dne
utopic
dne
vivid
dne
wily
dne
xenial
dne
yakkety
dne
zesty
dne
linux-linaro-vexpress
lucid
dne
precise
ignored
saucy
dne
trusty
dne
utopic
dne
vivid
dne
wily
dne
xenial
dne
yakkety
dne
zesty
dne
linux-lts-quantal
lucid
dne
precise
Fixed 3.5.0-54.81~precise1
released
saucy
dne
trusty
dne
utopic
dne
vivid
dne
wily
dne
xenial
dne
yakkety
dne
zesty
dne
linux-lts-raring
lucid
dne
precise
Fixed 3.8.0-44.66~precise1
released
saucy
dne
trusty
dne
utopic
dne
vivid
dne
wily
dne
xenial
dne
yakkety
dne
zesty
dne
linux-lts-saucy
lucid
dne
precise
Fixed 3.11.0-26.45~precise1
released
saucy
dne
trusty
dne
utopic
dne
vivid
dne
wily
dne
xenial
dne
yakkety
dne
zesty
dne
linux-lts-trusty
lucid
dne
precise
Fixed 3.13.0-33.58~precise1
released
saucy
dne
trusty
dne
utopic
dne
vivid
dne
wily
dne
xenial
dne
yakkety
dne
zesty
dne
linux-lts-utopic
lucid
dne
precise
dne
trusty
dne
utopic
dne
vivid
dne
wily
dne
xenial
dne
yakkety
dne
zesty
dne
linux-lts-vivid
lucid
dne
precise
dne
trusty
dne
utopic
dne
vivid
dne
wily
dne
xenial
dne
yakkety
dne
zesty
dne
linux-lts-wily
precise
dne
trusty
dne
vivid
dne
wily
dne
xenial
dne
yakkety
dne
zesty
dne
linux-lts-xenial
precise
dne
trusty
not-affected
vivid
dne
wily
dne
xenial
dne
yakkety
dne
zesty
dne
linux-maguro
lucid
dne
precise
dne
saucy
ignored
trusty
dne
utopic
dne
vivid
dne
wily
dne
xenial
dne
yakkety
dne
zesty
dne
linux-mako
lucid
dne
precise
dne
saucy
ignored
trusty
ignored
utopic
not-affected
vivid
not-affected
wily
not-affected
xenial
not-affected
yakkety
not-affected
zesty
dne
linux-manta
lucid
dne
precise
dne
saucy
ignored
trusty
ignored
utopic
not-affected
vivid
not-affected
wily
not-affected
xenial
dne
yakkety
dne
zesty
dne
linux-mvl-dove
lucid
ignored
precise
dne
saucy
dne
trusty
dne
utopic
dne
vivid
dne
wily
dne
xenial
dne
yakkety
dne
zesty
dne
linux-qcm-msm
lucid
ignored
precise
ignored
saucy
dne
trusty
dne
utopic
dne
vivid
dne
wily
dne
xenial
dne
yakkety
dne
zesty
dne
linux-raspi2
precise
dne
trusty
dne
vivid
dne
wily
not-affected
xenial
not-affected
yakkety
not-affected
zesty
not-affected
linux-snapdragon
precise
dne
trusty
dne
wily
dne
xenial
not-affected
yakkety
not-affected
zesty
not-affected
linux-ti-omap4
lucid
dne
precise
Fixed 3.2.0-1452.72
released
saucy
ignored
trusty
dne
utopic
dne
vivid
dne
wily
dne
xenial
dne
yakkety
dne
zesty
dne
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
kernel
RHEL 6
0:2.6.32-431.29.2.el6
fixed
RHEL 7
0:3.10.0-123.8.1.el7
fixed
kernel-abi-whitelists
RHEL 6
0:2.6.32-431.29.2.el6
fixed
RHEL 7
0:3.10.0-123.8.1.el7
fixed
kernel-bootwrapper
RHEL 6
0:2.6.32-431.29.2.el6
fixed
RHEL 7
0:3.10.0-123.8.1.el7
fixed
kernel-debug
RHEL 6
0:2.6.32-431.29.2.el6
fixed
RHEL 7
0:3.10.0-123.8.1.el7
fixed
kernel-debug-devel
RHEL 6
0:2.6.32-431.29.2.el6
fixed
RHEL 7
0:3.10.0-123.8.1.el7
fixed
kernel-devel
RHEL 6
0:2.6.32-431.29.2.el6
fixed
RHEL 7
0:3.10.0-123.8.1.el7
fixed
kernel-doc
RHEL 6
0:2.6.32-431.29.2.el6
fixed
RHEL 7
0:3.10.0-123.8.1.el7
fixed
kernel-firmware
RHEL 6
0:2.6.32-431.29.2.el6
fixed
kernel-headers
RHEL 6
0:2.6.32-431.29.2.el6
fixed
RHEL 7
0:3.10.0-123.8.1.el7
fixed
kernel-kdump
RHEL 6
0:2.6.32-431.29.2.el6
fixed
RHEL 7
0:3.10.0-123.8.1.el7
fixed
kernel-kdump-devel
RHEL 6
0:2.6.32-431.29.2.el6
fixed
RHEL 7
0:3.10.0-123.8.1.el7
fixed
kernel-tools
RHEL 7
0:3.10.0-123.8.1.el7
fixed
kernel-tools-libs
RHEL 7
0:3.10.0-123.8.1.el7
fixed
kernel-tools-libs-devel
RHEL 7
0:3.10.0-123.8.1.el7
fixed
perf
RHEL 6
0:2.6.32-431.29.2.el6
fixed
RHEL 7
0:3.10.0-123.8.1.el7
fixed
python-perf
RHEL 6
0:2.6.32-431.29.2.el6
fixed
RHEL 7
0:3.10.0-123.8.1.el7
fixed
Common Weakness Enumeration
References
http://article.gmane.org/gmane.linux.kernel/1713179
http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html
http://rhn.redhat.com/errata/RHSA-2014-1143.html
http://rhn.redhat.com/errata/RHSA-2014-1281.html
http://secunia.com/advisories/59777
http://secunia.com/advisories/60011
http://secunia.com/advisories/60564
http://www.openwall.com/lists/oss-security/2014/05/29/5
http://www.ubuntu.com/usn/USN-2334-1
http://www.ubuntu.com/usn/USN-2335-1
https://bugzilla.redhat.com/show_bug.cgi?id=1102571
http://article.gmane.org/gmane.linux.kernel/1713179
http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html
http://rhn.redhat.com/errata/RHSA-2014-1143.html
http://rhn.redhat.com/errata/RHSA-2014-1281.html
http://secunia.com/advisories/59777
http://secunia.com/advisories/60011
http://secunia.com/advisories/60564
http://www.openwall.com/lists/oss-security/2014/05/29/5
http://www.ubuntu.com/usn/USN-2334-1
http://www.ubuntu.com/usn/USN-2335-1
https://bugzilla.redhat.com/show_bug.cgi?id=1102571