CVE-2014-0069

HighCVSS 7.2/10Last modified Jun 17, 2026

Description

The cifs_iovec_write function in fs/cifs/file.c in the Linux kernel through 3.13.5 does not properly handle uncached write operations that copy fewer than the requested number of bytes, which allows local users to obtain sensitive information from kernel memory, cause a denial of service (memory corruption and system crash), or possibly gain privileges via a writev system call with a crafted pointer.

Metrics

CVSS 2.0 7.2/10AV:L/AC:L/Au:N/C:C/I:C/A:C

Weakness enumeration

CWE-119

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://article.gmane.org/gmane.linux.kernel.cifs/9401Broken Link
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=5d81de8e8667da7135d3a32a964087c0faf5483fBroken Link
http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00026.htmlMailing List, Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2014-0328.htmlThird Party Advisory
http://www.openwall.com/lists/oss-security/2014/02/17/4Mailing List, Third Party Advisory
http://www.securityfocus.com/bid/65588Third Party Advisory, VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1064253Issue Tracking, Third Party Advisory
https://github.com/torvalds/linux/commit/5d81de8e8667da7135d3a32a964087c0faf5483fPatch, Third Party Advisory
http://article.gmane.org/gmane.linux.kernel.cifs/9401Broken Link
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=5d81de8e8667da7135d3a32a964087c0faf5483fBroken Link
http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00026.htmlMailing List, Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2014-0328.htmlThird Party Advisory
http://www.openwall.com/lists/oss-security/2014/02/17/4Mailing List, Third Party Advisory
http://www.securityfocus.com/bid/65588Third Party Advisory, VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1064253Issue Tracking, Third Party Advisory
https://github.com/torvalds/linux/commit/5d81de8e8667da7135d3a32a964087c0faf5483fPatch, Third Party Advisory

Timeline

Published: Feb 28, 2014
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2014

CVE-2014-00716.4PackStack in Red Hat OpenStack 4.0 does not enforce the default security groups when deployed to Neutron, which allows remote attackers to b CVE-2014-00727.5ios/CDVFileTransfer.m in the Apache Cordova File-Transfer standalone plugin (org.apache.cordova.file-transfer) before 0.4.2 for iOS and the CVE-2014-00739.8The CDVInAppBrowser class in the Apache Cordova In-App-Browser standalone plugin (org.apache.cordova.inappbrowser) before 0.3.2 for iOS and CVE-2014-00747.5Apache Shiro 1.x before 1.2.3, when using an LDAP server with unauthenticated bind enabled, allows remote attackers to bypass authentication CVE-2014-00755.0Integer overflow in the parseChunkHeader function in java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat before 6 CVE-2014-00761.9The Montgomery ladder implementation in OpenSSL through 1.0.0l does not ensure that certain swap operations have a constant-time behavior, w CVE-2014-00775.5drivers/vhost/net.c in the Linux kernel before 3.13.10, when mergeable buffers are disabled, does not properly validate packet lengths, whic CVE-2014-00784.0The CatalogController in Red Hat CloudForms Management Engine (CFME) before 5.2.3.2 allows remote authenticated users to delete arbitrary ca CVE-2014-00795.0The ValidateUserLogon function in provider/libserver/ECSession.cpp in Zarafa 7.1.8, 6.20.0, and earlier, when using certain build conditions CVE-2014-00806.8SQL injection vulnerability in activerecord/lib/active_record/connection_adapters/postgresql/cast.rb in Active Record in Ruby on Rails 4.0.x CVE-2014-00814.3Multiple cross-site scripting (XSS) vulnerabilities in actionview/lib/action_view/helpers/number_helper.rb in Ruby on Rails before 3.2.17, 4 CVE-2014-00825.0actionpack/lib/action_view/template/text.rb in Action View in Ruby on Rails 3.x before 3.2.17 converts MIME type strings to symbols during u