cvelist/2014/3xxx/CVE-2014-3180.json
2019-11-06 20:01:42 +00:00

67 lines
2.1 KiB
JSON

{
"CVE_data_meta": {
"ASSIGNER": "security@google.com",
"ID": "CVE-2014-3180",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "kernel",
"version": {
"version_data": [
{
"version_value": "before 3.17"
}
]
}
}
]
},
"vendor_name": "Linux"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "** DISPUTED ** In kernel/compat.c in the Linux kernel before 3.17, as used in Google Chrome OS and other products, there is a possible out-of-bounds read. restart_syscall uses uninitialized data when restarting compat_sys_nanosleep. NOTE: this is disputed because the code path is unreachable."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "out-of-bounds read"
}
]
}
]
},
"references": {
"reference_data": [
{
"url": "https://bugs.chromium.org/p/chromium/issues/detail?id=408827",
"refsource": "MISC",
"name": "https://bugs.chromium.org/p/chromium/issues/detail?id=408827"
},
{
"url": "https://lkml.org/lkml/2014/9/7/29",
"refsource": "MISC",
"name": "https://lkml.org/lkml/2014/9/7/29"
}
]
}
}