CVE-2014-2039

MediumCVSS 4.9/10Last modified Jun 17, 2026

Description

arch/s390/kernel/head64.S in the Linux kernel before 3.13.5 on the s390 platform does not properly handle attempted use of the linkage stack, which allows local users to cause a denial of service (system crash) by executing a crafted instruction.

Metrics

CVSS 2.0 4.9/10AV:L/AC:L/Au:N/C:N/I:N/A:C

Weakness enumeration

CWE-20

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8d7f6690cedb83456edd41c9bd583783f0703bf0
http://linux.oracle.com/errata/ELSA-2014-0771.htmlThird Party Advisory
http://secunia.com/advisories/59262Third Party Advisory
http://secunia.com/advisories/59309Third Party Advisory
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.13.5Release Notes, Vendor Advisory
http://www.openwall.com/lists/oss-security/2014/02/20/14Mailing List, Patch, Third Party Advisory
http://www.securityfocus.com/bid/65700Third Party Advisory, VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1067558Issue Tracking, Third Party Advisory
https://github.com/torvalds/linux/commit/8d7f6690cedb83456edd41c9bd583783f0703bf0Patch, Third Party Advisory
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8d7f6690cedb83456edd41c9bd583783f0703bf0
http://linux.oracle.com/errata/ELSA-2014-0771.htmlThird Party Advisory
http://secunia.com/advisories/59262Third Party Advisory
http://secunia.com/advisories/59309Third Party Advisory
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.13.5Release Notes, Vendor Advisory
http://www.openwall.com/lists/oss-security/2014/02/20/14Mailing List, Patch, Third Party Advisory
http://www.securityfocus.com/bid/65700Third Party Advisory, VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1067558Issue Tracking, Third Party Advisory
https://github.com/torvalds/linux/commit/8d7f6690cedb83456edd41c9bd583783f0703bf0Patch, Third Party Advisory

Timeline

Published: Feb 28, 2014
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2014

CVE-2014-20402.1Multiple cross-site scripting (XSS) vulnerabilities in the (1) callback_multicheck, (2) callback_radio, and (3) callback_wysiwygin functions CVE-2014-20427.5Unrestricted file upload vulnerability in the Manage Project functionality in Livetecs Timelive before 6.5.1 allows remote authenticated use CVE-2014-20436.5SQL injection vulnerability in Resources/System/Templates/Data.aspx in Procentia IntelliPen before 1.1.18.1658 allows remote authenticated u CVE-2014-20447.5Incomplete blacklist vulnerability in ajax/upload.php in ownCloud before 5.0, when running on Windows, allows remote authenticated users to CVE-2014-20456.1Multiple cross-site scripting (XSS) vulnerabilities in the old and new interfaces in Viprinet Multichannel VPN Router 300 allow remote attac CVE-2014-20469.7cgi-bin/rpcBridge in the web interface 1.1 on Broadcom Ltd PIPA C211 rev2 does not properly restrict access, which allows remote attackers t CVE-2014-20476.8Session fixation vulnerability in ownCloud before 6.0.2, when PHP is configured to accept session parameters through a GET request, allows r CVE-2014-20489.8The user_openid app in ownCloud Server before 5.0.15 allows remote attackers to obtain access by leveraging an insecure OpenID implementatio CVE-2014-20495.0The default Flash Cross Domain policies in ownCloud before 5.0.15 and 6.x before 6.0.2 allows remote attackers to access user files via unsp CVE-2014-20506.5Cross-site request forgery (CSRF) vulnerability in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2 allows remote attackers to hijack th CVE-2014-20517.5ownCloud Server before 5.0.15 and 6.0.x before 6.0.2 allows remote attackers to conduct an LDAP injection attack via unspecified vectors, as CVE-2014-20529.8Zend Framework, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, allows remote attackers to read arbitrary files, cause a de