Files
CVEs-PoC/2014/CVE-2014-1444.md
T
2024-06-09 00:33:16 +00:00

751 B

CVE-2014-1444

Description

The fst_get_iface function in drivers/net/wan/farsync.c in the Linux kernel before 3.11.7 does not properly initialize a certain data structure, which allows local users to obtain sensitive information from kernel memory by leveraging the CAP_NET_ADMIN capability for an SIOCWANDEV ioctl call.

POC

Reference

Github

No PoCs found on GitHub currently.