Published: 16/03/2015 Updated: 13/02/2023

CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9

VMScore: 725

Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

The implementation of certain splice_write file operations in the Linux kernel prior to 3.16 does not enforce a restriction on the maximum size of a single file, which allows local users to cause a denial of service (system crash) or possibly have unspecified other impact via a crafted splice system call, as demonstrated by use of a file descriptor associated with an ext4 filesystem.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel

Synopsis Important: kernel security and bug fix update Type/Severity Security Advisory: Important Topic Updated kernel packages that fix multiple security issues and several bugsare now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having Important securityimpact ...

Synopsis Moderate: kernel security and bug fix update Type/Severity Security Advisory: Moderate Topic Updated kernel packages that fix one security issue and several bugs arenow available for Red Hat Enterprise Linux 5Red Hat Product Security has rated this update as having Moderate securityimpact A Commo ...

Several vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service, information leaks or privilege escalation CVE-2013-7421 / CVE-2014-9644 It was discovered that the Crypto API allowed unprivileged users to load arbitrary kernel modules A local user can use this flaw to exploit vulnerabilities ...

Several security issues were fixed in the kernel ...

The Linux kernel through 3174 does not properly restrict dropping of supplemental group memberships in certain namespace scenarios, which allows local users to bypass intended file permissions by leveraging a POSIX ACL containing an entry for the group category that is more restrictive than the entry for the other category, aka a "negative groups ...

A flaw was found in the way the Linux kernel's splice() system call validated its parameters On certain file systems, a local, unprivileged user could use this flaw to write past the maximum file size, and thus crash the system ...

/* ---------------------------------------------------------------------------------------------------- * cve-2014-7822_pocc * * The implementation of certain splice_write file operations in the Linux kernel before 316 does not enforce a restriction on the maximum size of a single file * which allows local users to cause a denial of service ...

The implementation of certain splice_write file operations in the Linux kernel before 316 does not enforce a restriction on the maximum size of a single file which allows local users to cause a denial of service (system crash) or possibly have unspecified other impact via a crafted splice system call, as demonstrated by use of a file descriptor as ...

CWE-264 https://bugzilla.redhat.com/show_bug.cgi?id=1163792 https://github.com/torvalds/linux/commit/8d0207652cbe27d1f962050737848e5ad4671958 http://rhn.redhat.com/errata/RHSA-2015-0164.html http://rhn.redhat.com/errata/RHSA-2015-0102.html http://rhn.redhat.com/errata/RHSA-2015-0674.html http://www.debian.org/security/2015/dsa-3170 http://rhn.redhat.com/errata/RHSA-2015-0694.html http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00020.html http://www.ubuntu.com/usn/USN-2543-1 http://www.ubuntu.com/usn/USN-2541-1 http://www.ubuntu.com/usn/USN-2544-1 http://www.ubuntu.com/usn/USN-2542-1 https://www.exploit-db.com/exploits/36743/http://www.osvdb.org/117810 http://www.securityfocus.com/bid/72347 http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00009.html http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00008.html http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00009.html http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8d0207652cbe27d1f962050737848e5ad4671958 https://access.redhat.com/errata/RHSA-2015:0102 https://nvd.nist.gov https://usn.ubuntu.com/2542-1/https://www.exploit-db.com/exploits/36743/https://access.redhat.com/security/cve/cve-2014-7822 https://www.debian.org/security/./dsa-3170

CVE-2014-7822

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect