hshivhare67 / Kernel_v3.0.35

Other
0 stars 0 forks source link

CVE-2014-9922 (High) detected in linux-stable-rtv3.8.6 #857

Open mend-bolt-for-github[bot] opened 1 year ago

mend-bolt-for-github[bot] commented 1 year ago

CVE-2014-9922 - High Severity Vulnerability

Vulnerable Library - linux-stable-rtv3.8.6

Julia Cartwright's fork of linux-stable-rt.git

Library home page: https://git.kernel.org/pub/scm/linux/kernel/git/julia/linux-stable-rt.git

Found in HEAD commit: 22324ae9738f0a1eeb173ff05137c8317c350189

Found in base branch: master

Vulnerable Source Files (1)

Vulnerability Details

The eCryptfs subsystem in the Linux kernel before 3.18 allows local users to gain privileges via a large filesystem stack that includes an overlayfs layer, related to fs/ecryptfs/main.c and fs/overlayfs/super.c.

Publish Date: 2017-04-04

URL: CVE-2014-9922

CVSS 3 Score Details (7.0)

Base Score Metrics: - Exploitability Metrics: - Attack Vector: Local - Attack Complexity: High - Privileges Required: Low - User Interaction: None - Scope: Unchanged - Impact Metrics: - Confidentiality Impact: High - Integrity Impact: High - Availability Impact: High

For more information on CVSS3 Scores, click here.

Suggested Fix

Type: Upgrade version

Origin: https://nvd.nist.gov/vuln/detail/CVE-2014-9922

Release Date: 2017-04-04

Fix Resolution: 3.18


Step up your Open Source Security Game with Mend here