Direct naar de inhoud
⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →
CVE's Videos Dagbriefing

← Terug naar CVE-database

CVE-2014-4027

LOW · 2.3 CVSS Gepubliceerd: CWE-200

Beschrijving

The rd_build_device_space function in drivers/target/target_core_rd.c in the Linux kernel before 3.14 does not properly initialize a certain data structure, which allows local users to obtain sensitive information from ramdisk_mcp memory by leveraging access to a SCSI initiator.

Vendors

Linux Redhat Canonical Suse F5

Affected products

Linux Kernel Enterprise Linux Ubuntu Linux Linux Enterprise Desktop Linux Enterprise High Availability Extension Linux Enterprise Real Time Extension Linux Enterprise Server Big-ip Access Policy Manager Big-ip Advanced Firewall Manager Big-ip Analytics Big-ip Application Acceleration Manager Big-ip Application Security Manager Big-ip Domain Name System Big-ip Edge Gateway Big-ip Global Traffic Manager Big-ip Link Controller Big-ip Local Traffic Manager Big-ip Policy Enforcement Manager Big-ip Protocol Security Module Big-ip Wan Optimization Manager Big-ip Webaccelerator Big-iq Application Delivery Controller Big-iq Cloud Big-iq Device Big-iq Security Enterprise Manager

References