CVE:CVE-2014-1738
CNNVD:CNNVD-201405-204
Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。NFSv4 implementation是其中的一个分布式文件系统协议。
Linux kernel 3.14.3及之前版本的drivers/block/floppy.c文件中的‘raw_cmd_copyout’函数存在安全漏洞，该漏洞源于当处理FDRAWCMD ioctl调用时，程序没有正确限制对指针的访问。本地攻击者可借助/dev/fd设备的写访问权限利用该漏洞获取内核堆内存的敏感信息。
solution:Upgrade linux linux_kernel to a higher version than 3.14.3,and avoid the version (,3.14.3]; Upgrade redhat enterprise_linux_eus to a higher version than 5.6,6.3,and avoid the version 5.6,6.3; Upgrade debian debian_linux to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade oracle linux to a higher version than 5,6,and avoid the version 5,6; Upgrade suse linux_enterprise_desktop to a higher version than 11:sp3,and avoid the version 11:sp3; Upgrade suse linux_enterprise_high_availability_extension to a higher version than 11:sp3,and avoid the version 11:sp3; Upgrade suse linux_enterprise_real_time_extension to a higher version than 11:sp3,and avoid the version 11:sp3; Upgrade suse linux_enterprise_server to a higher version than 11:sp3,and avoid the version 11:sp3