CVE-2014-3184

 

Published at: - 28-09-2014 12:55

Last modified: - 21-09-2022 08:44

Total changes: - 2

Description

The report_fixup functions in the HID subsystem in the Linux kernel before 3.16.2 might allow physically proximate attackers to cause a denial of service (out-of-bounds write) via a crafted device that provides a small report descriptor, related to (1) drivers/hid/hid-cherry.c, (2) drivers/hid/hid-kye.c, (3) drivers/hid/hid-lg.c, (4) drivers/hid/hid-monterey.c, (5) drivers/hid/hid-petalynx.c, and (6) drivers/hid/hid-sunplus.c.

Common Vulnerability Scoring System (CVSS)

AV:L/AC:M/Au:N/C:N/I:N/A:C

 

Verification logic

 

Reference

• [oss-security] 20140911 Multiple Linux USB driver CVE assignment-
• http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.16.2
• https://github.com/torvalds/linux/commit/4ab25786c87eb20857bbb715c3ae34ec8fd6a214
• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=4ab25786c87eb20857bbb715c3ae34ec8fd6a214
• https://code.google.com/p/google-security-research/issues/detail?id=91
• https://bugzilla.redhat.com/show_bug.cgi?id=1141391
• USN-2377-1-
• USN-2374-1-
• USN-2379-1-
• USN-2376-1-
• USN-2375-1-
• USN-2378-1-
• RHSA-2014:1318-
• SUSE-SU-2015:0481-
• openSUSE-SU-2015:0566-
• SUSE-SU-2015:0652-
• SUSE-SU-2015:0812-
• 69768-
• RHSA-2015:1272-

 

Keywords

NVD

 

CVE-2014-3184

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures