Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2014-4322

EPSS 3.45% · P88
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2014-4322

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
drivers/misc/qseecom.c in the QSEECOM driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, does not validate certain offset, length, and base values within an ioctl call, which allows attackers to gain privileges or cause a denial of service (memory corruption) via a crafted application.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
QSEECOM driver for the Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Android contributions for MSM是一个Android的MSM项目,该项目的主要目的是建立一个包含高通MSM芯片组的Android平台。QSEECOM driver是一个提供了ioctl系统调用接口到用户空间的客户端进行通信的驱动程序。 Qualcomm Innovation Center(QuIC)Android contributions for MSM设备中使用的QSEECOM driver for the Linux kernel 3.x版本中的drivers/misc/q
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2014-4322

#POC DescriptionSource LinkShenlong Link
1Gain privileges:system -> root,as a part of https://github.com/retme7/CVE-2014-7911_pochttps://github.com/retme7/CVE-2014-4322_pocPOC Details
2CVE-2014-4322 Exploithttps://github.com/laginimaineb/cve-2014-4322POC Details
3Just an attempt to adapt for Note 4, I do not know what I am doing.https://github.com/askk/CVE-2014-4322_adaptationPOC Details
4must run this native binary with system privilegehttps://github.com/koozxcv/CVE-2014-4322POC Details
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2014-4322

登录查看更多情报信息。

Same Patch Batch · n/a · 2014-12-24 · 31 CVEs total

CVE-2014-6132IBM WebSphere Service Registry and Repository Web UI 跨站脚本漏洞
CVE-2014-7999多款Cisco-Meraki设备权限许可和访问控制漏洞
CVE-2014-7995多款Cisco-Meraki设备权限许可和访问控制漏洞
CVE-2014-7994多款Cisco-Meraki设备输入验证漏洞
CVE-2014-7993多款Cisco-Meraki设备信息泄露漏洞
CVE-2014-6188IBM WebSphere Service Registry and Repository 跨站脚本漏洞
CVE-2014-6187IBM WebSphere Service Registry and Repository 跨站请求伪造漏洞
CVE-2014-6186IBM WebSphere Service Registry and Repository 权限许可和访问控制漏洞
CVE-2014-6181IBM WebSphere Service Registry and Repository 权限许可和访问控制漏洞
CVE-2014-6180IBM WebSphere Service Registry and Repository Web UI 跨站脚本漏洞
CVE-2014-6179IBM WebSphere Service Registry and Repository Web UI 跨站脚本漏洞
CVE-2014-6178IBM WebSphere Service Registry and Repository widgets 跨站脚本漏洞
CVE-2014-6177IBM WebSphere Service Registry and Repository 安全漏洞
CVE-2014-6155IBM WebSphere Service Registry and Repository 目录遍历漏洞
CVE-2014-6153IBM WebSphere Service Registry and Repository Web UI 安全漏洞
CVE-2004-2771Heirloom mailx和BSD mailx 输入验证错误漏洞
CVE-2014-3569OpenSSL‘ssl23_get_client_hello()’函数拒绝服务漏洞
CVE-2014-9418Huawei eSpace Desktop eSpace Meeting ActiveX控件缓冲区溢出漏洞
CVE-2014-9417Huawei eSpace Desktop Meeting组件输入验证漏洞
CVE-2014-9416Huawei eSpace Desktop 不可信搜索路径漏洞

Showing top 20 of 31 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

V. Comments for CVE-2014-4322

No comments yet


Leave a comment