Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2014-3185

EPSS 0.10% · P28
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2014-3185

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Multiple buffer overflows in the command_port_read_callback function in drivers/usb/serial/whiteheat.c in the Whiteheat USB Serial Driver in the Linux kernel before 3.16.2 allow physically proximate attackers to execute arbitrary code or cause a denial of service (memory corruption and system crash) via a crafted device that provides a large amount of (1) EHCI or (2) XHCI data associated with a bulk response.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Linux Kernel ‘whiteheat.c’缓冲区溢出漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。NFSv4 implementation是其中的一个分布式文件系统协议。 Linux kernel 3.16.2之前版本的Whiteheat USB Serial Driver中drivers/usb/serial/whiteheat.c脚本中的‘command_port_read_callback’函数中存在缓冲区溢出漏洞,该漏洞源于程序没有正确验证EHCI和XHCI数据中的bulk响应。攻击者可借助特制的设备利用该
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2014-3185

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2014-3185

登录查看更多情报信息。

Same Patch Batch · n/a · 2014-09-28 · 42 CVEs total

CVE-2014-6762Android bongomovie应用程序加密问题漏洞
CVE-2014-6752Android Mindless Behavior Fan Base应用程序加密问题漏洞
CVE-2014-6753Android sunnat e rasool应用程序加密问题漏洞
CVE-2014-6754Android Vector Outage Manager应用程序加密问题漏洞
CVE-2014-6755Android SDN Forum应用程序加密问题漏洞
CVE-2014-6756Android Reddit Aww应用程序加密问题漏洞
CVE-2014-6757Android Koran - AlqoranVideos应用程序加密问题漏洞
CVE-2014-6758Android Qin Story应用程序加密问题漏洞
CVE-2014-6759Android Downton Abbey Fan Portal应用程序加密问题漏洞
CVE-2014-6760Android Harem Thief Dating应用程序加密问题漏洞
CVE-2014-6761Android Aprende a Meditar应用程序加密问题漏洞
CVE-2014-6751Android Grasshopper Beta应用程序加密问题漏洞
CVE-2014-6763Android Codename Birdgame应用程序加密问题漏洞
CVE-2014-6764Android Assyrian应用程序加密问题漏洞
CVE-2014-6765Android No Fuss Home Loans应用程序加密问题漏洞
CVE-2014-6766Android Afro-Beat应用程序加密问题漏洞
CVE-2014-6767Android Juggle! FREE应用程序加密问题漏洞
CVE-2014-6768Android Anywhere Anytime Yoga Workout应用程序加密问题漏洞
CVE-2014-6769Android Meteo Belgique应用程序加密问题漏洞
CVE-2014-6770Android Aerospace Jobs应用程序加密问题漏洞

Showing top 20 of 42 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

V. Comments for CVE-2014-3185

No comments yet


Leave a comment