{"id":"CVE-2014-1738","url":"https://www.cyber-defence.io/tools/cve/CVE-2014-1738","generatedAt":"2026-10-27T18:56:42.964Z","title":"The raw_cmd_copyout function in drivers/block/floppy.c in the Linux kernel through 3.14.3 does not properly restrict access to certain pointers during processing of an FDRAWCMD ioctl call, which allows local users to obtain sensitive information from…","description":"The raw_cmd_copyout function in drivers/block/floppy.c in the Linux kernel through 3.14.3 does not properly restrict access to certain pointers during processing of an FDRAWCMD ioctl call, which allows local users to obtain sensitive information from kernel heap memory by leveraging write access to a /dev/fd device.","published":"2014-05-11T21:55:06.000Z","lastModified":"2026-06-17T00:05:28.000Z","status":"Modified","sourceIdentifier":"chrome-cve-admin@google.com","cvss":{"version":"2.0","score":2.1,"severity":"LOW","vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N"},"cwe":["CWE-200"],"affected":["linux/linux kernel","redhat/enterprise linux eus","debian/debian linux","oracle/linux","suse/linux enterprise desktop","suse/linux enterprise high availability extension","suse/linux enterprise real time extension","suse/linux enterprise server"],"epss":{"score":0.00507,"percentile":0.4301,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.51%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=2145e15e0557a01b9195d1c7199a1b92cb9be81f","source":"chrome-cve-admin@google.com"},{"url":"http://linux.oracle.com/errata/ELSA-2014-0771.html","source":"chrome-cve-admin@google.com"},{"url":"http://linux.oracle.com/errata/ELSA-2014-3043.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00007.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00012.html","source":"chrome-cve-admin@google.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0800.html","source":"chrome-cve-admin@google.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0801.html","source":"chrome-cve-admin@google.com"},{"url":"http://secunia.com/advisories/59262","source":"chrome-cve-admin@google.com"},{"url":"http://secunia.com/advisories/59309","source":"chrome-cve-admin@google.com"},{"url":"http://secunia.com/advisories/59406","source":"chrome-cve-admin@google.com"},{"url":"http://secunia.com/advisories/59599","source":"chrome-cve-admin@google.com"},{"url":"http://www.debian.org/security/2014/dsa-2926","source":"chrome-cve-admin@google.com"},{"url":"http://www.debian.org/security/2014/dsa-2928","source":"chrome-cve-admin@google.com"},{"url":"http://www.openwall.com/lists/oss-security/2014/05/09/2","source":"chrome-cve-admin@google.com"},{"url":"http://www.securityfocus.com/bid/67302","source":"chrome-cve-admin@google.com"},{"url":"http://www.securitytracker.com/id/1030474","source":"chrome-cve-admin@google.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1094299","source":"chrome-cve-admin@google.com"},{"url":"https://github.com/torvalds/linux/commit/2145e15e0557a01b9195d1c7199a1b92cb9be81f","source":"chrome-cve-admin@google.com"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=2145e15e0557a01b9195d1c7199a1b92cb9be81f","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://linux.oracle.com/errata/ELSA-2014-0771.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://linux.oracle.com/errata/ELSA-2014-3043.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00012.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0800.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0801.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/59262","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/59309","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/59406","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/59599","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2014/dsa-2926","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2014/dsa-2928","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2014/05/09/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/67302","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1030474","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1094299","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/torvalds/linux/commit/2145e15e0557a01b9195d1c7199a1b92cb9be81f","source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2014-1738","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}