Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2014-3631

EPSS 0.35% · P57
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2014-3631

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
The assoc_array_gc function in the associative-array implementation in lib/assoc_array.c in the Linux kernel before 3.16.3 does not properly implement garbage collection, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via multiple "keyctl newring" operations followed by a "keyctl timeout" operation.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Linux kernel 拒绝服务漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。NFSv4 implementation是其中的一个分布式文件系统协议。 Linux kernel 3.16.3之前版本的lib/assoc_array.c脚本的associative-array实现中的‘assoc_array_gc’函数中存在安全漏洞，该漏洞源于程序没有正确实现垃圾信息回收机制。本地攻击者可通过在keyctl timeout操作后执行keyctl newring操作利用该漏洞造成拒绝服务（空指针逆向
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2014-3631

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2014-3631

Please Login to view more intelligence information

Same Patch Batch · n/a · 2014-09-28 · 42 CVEs total

CVE-2014-6762Android bongomovie应用程序加密问题漏洞
CVE-2014-6752Android Mindless Behavior Fan Base应用程序加密问题漏洞
CVE-2014-6753Android sunnat e rasool应用程序加密问题漏洞
CVE-2014-6754Android Vector Outage Manager应用程序加密问题漏洞
CVE-2014-6755Android SDN Forum应用程序加密问题漏洞
CVE-2014-6756Android Reddit Aww应用程序加密问题漏洞
CVE-2014-6757Android Koran - AlqoranVideos应用程序加密问题漏洞
CVE-2014-6758Android Qin Story应用程序加密问题漏洞
CVE-2014-6759Android Downton Abbey Fan Portal应用程序加密问题漏洞
CVE-2014-6760Android Harem Thief Dating应用程序加密问题漏洞
CVE-2014-6761Android Aprende a Meditar应用程序加密问题漏洞
CVE-2014-6751Android Grasshopper Beta应用程序加密问题漏洞
CVE-2014-6763Android Codename Birdgame应用程序加密问题漏洞
CVE-2014-6764Android Assyrian应用程序加密问题漏洞
CVE-2014-6765Android No Fuss Home Loans应用程序加密问题漏洞
CVE-2014-6766Android Afro-Beat应用程序加密问题漏洞
CVE-2014-6767Android Juggle! FREE应用程序加密问题漏洞
CVE-2014-6768Android Anywhere Anytime Yoga Workout应用程序加密问题漏洞
CVE-2014-6769Android Meteo Belgique应用程序加密问题漏洞
CVE-2014-6770Android Aerospace Jobs应用程序加密问题漏洞

Showing top 20 of 42 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2014-3631

No comments yet

Leave a comment