CVE-2014-4027

low F5
CVSS v3 Base Score
2.3
AV:A/AC:M/Au:S/C:P/I:N/A:N
EPSS Score
0.1%
Exploitation probability in 30 days
Top 75% most likely to be exploited
Attack Characteristics
Attack Vector
Adjacent
Attack Complexity
M
Confidentiality
P
Integrity
None
Availability
None
Published: June 23, 2014 (4342 days ago)
Last Modified: May 6, 2026
Vendor: F5
Source: NVD

Description

The rd_build_device_space function in drivers/target/target_core_rd.c in the Linux kernel before 3.14 does not properly initialize a certain data structure, which allows local users to obtain sensitive information from ramdisk_mcp memory by leveraging access to a SCSI initiator.

CWE

CWE-200

Affected Products

linux linux kernelredhat enterprise linuxcanonical ubuntu linuxsuse linux enterprise desktopsuse linux enterprise high availability extensionsuse linux enterprise real time extensionsuse linux enterprise serverf5 big-ip access policy managerf5 big-ip advanced firewall managerf5 big-ip analytics

References

🔗 git.kernel.org 🔗 lists.opensuse.org 🔗 lists.opensuse.org 🔗 permalink.gmane.org 🔗 secunia.com