CVE-2014-3180

CWE-125 — Out-of-bounds Read8 documents7 sources
Severity
9.1CRITICAL
EPSS
0.2%
top 61.09%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Linux Linux KernelLinux Kernel
Timeline
PublishedNov 6
Latest updateMay 17

Description

In kernel/compat.c in the Linux kernel before 3.17, as used in Google Chrome OS and other products, there is a possible out-of-bounds read. restart_syscall uses uninitialized data when restarting compat_sys_nanosleep. NOTE: this is disputed because the code path is unreachable

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:HExploitability: 3.9 | Impact: 5.2

Affected Packages3 packages

▶NVDlinux/linux_kernel< 3.17
▶CVEListV5linux/kernelbefore 3.17
▶Debianlinux< 4.0.2-1+3

🔴Vulnerability Details

3
GHSA
GHSA-97v5-ggfx-g9wc: ** DISPUTED ** In kernel/compat↗2022-05-17
▶
OSV
CVE-2014-3180: In kernel/compat↗2019-11-06
▶
CVEList
CVE-2014-3180: In kernel/compat↗2019-11-06
▶

📋Vendor Advisories

2
Red Hat
kernel: out-of-bounds read in kernel/compact.c↗2019-11-18
▶
Debian
CVE-2014-3180: linux - In kernel/compat.c in the Linux kernel before 3.17, as used in Google Chrome OS ...↗2014
▶

💬Community

2
Bugzilla
CVE-2014-3180 kernel: out-of-bounds read in kernel/compact.c↗2019-11-21
▶
Bugzilla
CVE-2014-3180 kernel: out-of-bounds read in kernel/compact.c [fedora-all]↗2019-11-21
▶
CVE-2014-3180 (CRITICAL CVSS 9.1) | In kernel/compat.c in the Linux ker | cvebase.io