Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2014-4027 Details

Description

The rd_build_device_space function in drivers/target/target_core_rd.c in the Linux kernel before 3.14 does not properly initialize a certain data structure, which allows local users to obtain sensitive information from ramdisk_mcp memory by leveraging access to a SCSI initiator.

Metrics

CVSS 3.x Severity and Vector Strings:

No CVSS 3.x data is available for this CVE.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=4442dc8a92b8f9ad8ee9e7f8438f4c04c03a22dc	CVE
http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00006.html	CVE	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00007.html	CVE	Mailing ListThird Party Advisory
http://permalink.gmane.org/gmane.linux.scsi.target.devel/6618	CVE	Broken Link
https://bugzilla.redhat.com/show_bug.cgi?id=1108744	CVE	Issue TrackingPatchThird Party Advisory
http://secunia.com/advisories/59134	CVE	Broken Link
http://secunia.com/advisories/59777	CVE	Broken Link
http://secunia.com/advisories/60564	CVE	Broken Link
http://secunia.com/advisories/61310	CVE	Broken Link
https://github.com/torvalds/linux/commit/4442dc8a92b8f9ad8ee9e7f8438f4c04c03a22dc	CVE	PatchThird Party Advisory
https://support.f5.com/kb/en-us/solutions/public/15000/600/sol15685.html	CVE	Third Party Advisory
http://www.openwall.com/lists/oss-security/2014/06/11/1	CVE	Mailing ListPatchThird Party Advisory
http://www.ubuntu.com/usn/USN-2334-1	CVE	Third Party Advisory
http://www.ubuntu.com/usn/USN-2335-1	CVE	Third Party Advisory
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=4442dc8a92b8f9ad8ee9e7f8438f4c04c03a22dc	[email protected]
http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00006.html	[email protected]	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00007.html	[email protected]	Mailing ListThird Party Advisory
http://permalink.gmane.org/gmane.linux.scsi.target.devel/6618	[email protected]	Broken Link
https://bugzilla.redhat.com/show_bug.cgi?id=1108744	[email protected]	Issue TrackingPatchThird Party Advisory
http://secunia.com/advisories/59134	[email protected]	Broken Link
http://secunia.com/advisories/59777	[email protected]	Broken Link
http://secunia.com/advisories/60564	[email protected]	Broken Link
http://secunia.com/advisories/61310	[email protected]	Broken Link
https://github.com/torvalds/linux/commit/4442dc8a92b8f9ad8ee9e7f8438f4c04c03a22dc	[email protected]	PatchThird Party Advisory
https://support.f5.com/kb/en-us/solutions/public/15000/600/sol15685.html	[email protected]	Third Party Advisory
http://www.openwall.com/lists/oss-security/2014/06/11/1	[email protected]	Mailing ListPatchThird Party Advisory
http://www.ubuntu.com/usn/USN-2334-1	[email protected]	Third Party Advisory
http://www.ubuntu.com/usn/USN-2335-1	[email protected]	Third Party Advisory

see all 28 references

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-200	Exposure of Sensitive Information to an Unauthorized Actor	[email protected]

Affected Products

Product	Versions
linux linux kernel	< 3.14
CPE cpe:2.3:o:linux:linux_kernel:::::::: Remediation No remediation found in references.
redhat enterprise linux	6.0
CPE cpe:2.3:o:redhat:enterprise_linux:6.0:::::::* Remediation No remediation found in references.
canonical ubuntu linux	12.04
CPE cpe:2.3:o:canonical:ubuntu_linux:12.04::::esm::: Remediation No remediation found in references.
suse linux enterprise desktop	11 sp3
CPE cpe:2.3:o:suse:linux_enterprise_desktop:11:sp3:::::: Remediation No remediation found in references.
suse linux enterprise high availability extension	11 sp3
CPE cpe:2.3:o:suse:linux_enterprise_high_availability_extension:11:sp3:::::: Remediation No remediation found in references.
suse linux enterprise real time extension	11 sp3
CPE cpe:2.3:o:suse:linux_enterprise_real_time_extension:11:sp3:::::: Remediation No remediation found in references.
suse linux enterprise server	11 sp3
CPE cpe:2.3:o:suse:linux_enterprise_server:11:sp3::::-::* cpe:2.3:o:suse:linux_enterprise_server:11:sp3::::vmware::* Remediation No remediation found in references.
f5 big-ip access policy manager	>= 11.1.0, <= 11.6.0 12.0.0
CPE cpe:2.3:a:f5:big-ip_access_policy_manager:::::::: cpe:2.3:a:f5:big-ip_access_policy_manager:12.0.0:::::::* Remediation No remediation found in references.
f5 big-ip advanced firewall manager	>= 11.3.0, <= 11.6.0 12.0.0
CPE cpe:2.3:a:f5:big-ip_advanced_firewall_manager:::::::: cpe:2.3:a:f5:big-ip_advanced_firewall_manager:12.0.0:::::::* Remediation No remediation found in references.
f5 big-ip analytics	>= 11.1.0, <= 11.6.0 12.0.0
CPE cpe:2.3:a:f5:big-ip_analytics:::::::: cpe:2.3:a:f5:big-ip_analytics:12.0.0:::::::* Remediation No remediation found in references.
f5 big-ip application acceleration manager	>= 11.4.0, <= 11.6.0 12.0.0
CPE cpe:2.3:a:f5:big-ip_application_acceleration_manager:::::::: cpe:2.3:a:f5:big-ip_application_acceleration_manager:12.0.0:::::::* Remediation No remediation found in references.
f5 big-ip application security manager	>= 11.1.0, <= 11.6.0 12.0.0
CPE cpe:2.3:a:f5:big-ip_application_security_manager:::::::: cpe:2.3:a:f5:big-ip_application_security_manager:12.0.0:::::::* Remediation No remediation found in references.
f5 big-ip domain name system	12.0.0
CPE cpe:2.3:a:f5:big-ip_domain_name_system:12.0.0:::::::* Remediation No remediation found in references.
f5 big-ip edge gateway	>= 11.1.0, <= 11.3.0
CPE cpe:2.3:a:f5:big-ip_edge_gateway:::::::: Remediation No remediation found in references.
f5 big-ip global traffic manager	>= 11.1.0, <= 11.6.0
CPE cpe:2.3:a:f5:big-ip_global_traffic_manager:::::::: Remediation No remediation found in references.
f5 big-ip link controller	>= 11.1.0, <= 11.6.0 12.0.0
CPE cpe:2.3:a:f5:big-ip_link_controller:::::::: cpe:2.3:a:f5:big-ip_link_controller:12.0.0:::::::* Remediation No remediation found in references.
f5 big-ip local traffic manager	>= 11.1.0, <= 11.6.0 12.0.0
CPE cpe:2.3:a:f5:big-ip_local_traffic_manager:::::::: cpe:2.3:a:f5:big-ip_local_traffic_manager:12.0.0:::::::* Remediation No remediation found in references.
f5 big-ip policy enforcement manager	>= 11.3.0, <= 11.6.0 12.0.0
CPE cpe:2.3:a:f5:big-ip_policy_enforcement_manager:::::::: cpe:2.3:a:f5:big-ip_policy_enforcement_manager:12.0.0:::::::* Remediation No remediation found in references.
f5 big-ip protocol security module	>= 11.1.0, <= 11.4.1
CPE cpe:2.3:a:f5:big-ip_protocol_security_module:::::::: Remediation No remediation found in references.
f5 big-ip wan optimization manager	>= 11.1.0, <= 11.3.0
CPE cpe:2.3:a:f5:big-ip_wan_optimization_manager:::::::: Remediation No remediation found in references.
f5 big-ip webaccelerator	>= 11.1.0, <= 11.3.0
CPE cpe:2.3:a:f5:big-ip_webaccelerator:::::::: Remediation No remediation found in references.
f5 big-iq application delivery controller	4.5.0
CPE cpe:2.3:a:f5:big-iq_application_delivery_controller:4.5.0:::::::* Remediation No remediation found in references.
f5 big-iq cloud	>= 4.0.0, <= 4.5.0
CPE cpe:2.3:a:f5:big-iq_cloud:::::::: Remediation No remediation found in references.
f5 big-iq device	>= 4.2.0, <= 4.5.0
CPE cpe:2.3:a:f5:big-iq_device:::::::: Remediation No remediation found in references.
f5 big-iq security	>= 4.0.0, <= 4.5.0
CPE cpe:2.3:a:f5:big-iq_security:::::::: Remediation No remediation found in references.
f5 enterprise manager	>= 3.0.0, <= 3.1.1
CPE cpe:2.3:a:f5:enterprise_manager:::::::: Remediation No remediation found in references.

Change History

9 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	[email protected]
May 6, 2026	Status Change	[email protected]
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Nov 7, 2023	CVE Modified	[email protected]
Aug 21, 2020	Modified Analysis	[email protected]
Jan 7, 2017	CVE Modified	[email protected]
Dec 7, 2014	CVE Modified	[email protected]
Jun 23, 2014	Initial Analysis	[email protected]

CVE-2014-4027 Details

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

Change History

QUICK INFO