CVE-2014-8171
Vulnerability Summary
Timeline
Description
The memory resource controller (aka memcg) in the Linux kernel allows local users to cause a denial of service (deadlock) by spawning new processes within a memory-constrained cgroup.
CVSS Metrics
- v3.0•MEDIUM•Score: 5.5CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- v2.0•MEDIUM•Score: 4.9AV:L/AC:L/Au:N/C:N/I:N/A:C
EPSS Trends
Current EPSS score: 0.38%• Percentile: 32%
Techniques & Countermeasures
- CWE-399•Resource Management Errors
Weaknesses in this category are related to improper management of system resources.
Affected Systems
- chainguard•hyperv-daemons-6.18
< 0
- chainguard•hyperv-daemons-generic
< 0
- chainguard•linux-aws-6.12
< 0 | < 6.12.65-r0
- chainguard•linux-aws-6.12-boot-installed
< 0
- chainguard•linux-aws-6.12-fips-boot-installed
< 0
- chainguard•linux-aws-6.12-headers
< 0
- chainguard•linux-aws-6.12-modules
< 0
- chainguard•linux-aws-6.18
< 6.18.10-r0 | < 0
- chainguard•linux-aws-6.18-boot-installed
< 0
- chainguard•linux-aws-6.18-fips-boot-installed
< 0
- chainguard•linux-aws-6.18-headers
< 0
- chainguard•linux-aws-6.18-modules
< 0
- chainguard•linux-aws-generic
< 0 | < 6.18.5-r0
- chainguard•linux-aws-generic-boot-installed
< 0
- chainguard•linux-aws-generic-fips-boot-installed
< 0
- chainguard•linux-aws-generic-headers
< 0
- chainguard•linux-aws-generic-modules
< 0
- chainguard•linux-azure-6.12
< 0 | < 6.12.65-r1
- chainguard•linux-azure-6.18
< 0
- chainguard•linux-azure-6.18-boot-installed
< 0
- chainguard•linux-azure-6.18-fips-boot-installed
< 0
- chainguard•linux-azure-6.18-headers
< 0
- chainguard•linux-azure-6.18-modules
< 0
- chainguard•linux-azure-generic
< 6.18.5-r0 | < 0
- chainguard•linux-azure-generic-boot-installed
< 0
- chainguard•linux-azure-generic-fips-boot-installed
< 0
- chainguard•linux-azure-generic-headers
< 0
- chainguard•linux-azure-generic-modules
< 0
- chainguard•linux-gcp-6.12
< 6.12.65-r0 | < 0
- chainguard•linux-gcp-6.18
< 6.18.10-r0 | < 0
- chainguard•linux-gcp-6.18-boot-installed
< 0
- chainguard•linux-gcp-6.18-fips-boot-installed
< 0
- chainguard•linux-gcp-6.18-headers
< 0
- chainguard•linux-gcp-6.18-modules
< 0
- chainguard•linux-gcp-generic
< 0 | < 6.18.5-r0
- chainguard•linux-gcp-generic-boot-installed
< 0
- chainguard•linux-gcp-generic-fips-boot-installed
< 0
- chainguard•linux-gcp-generic-headers
< 0
- chainguard•linux-gcp-generic-modules
< 0
- chainguard•linux-qemu-6.12
< 6.12.71-r0 | < 0
- chainguard•linux-qemu-6.18
< 6.18.10-r0
- chainguard•linux-qemu-generic
< 0 | < 6.18.5-r0
- chainguard•linux-qemu-generic-bootc-boot-installed
< 6.18.5-r0
- chainguard•linux-qemu-melange
< 6.18.16-r0
- chainguard•linux-qemu-rc
< 6.18_rc6-r0 | < 6.19_rc4-r0 | < 6.19_rc2-r0 | < 6.18_rc7-r2 | < 6.19_rc1-r0 | < 6.18_rc5-r1 | < 0 | < 6.18_rc7-r3 | < 6.19_rc1-r2 | < 6.19_rc1-r1 | < 6.18_rc5-r0 | < 6.19_rc3-r0 | < 6.19_rc5-r0
- chainguard•linux-qemu-rc-boot-installed
< 0
- chainguard•linux-qemu-rc-fips-boot-installed
< 0
- chainguard•linux-qemu-rc-headers
< 0
- chainguard•linux-qemu-rc-modules
< 0
- chainguard•linux-vmware-6.12
< 6.12.71-r0 | < 0
Showing first 50 affected entries in server-rendered view.
References (7)
- http://rhn.redhat.com/errata/RHSA-2016-0068.html
- http://rhn.redhat.com/errata/RHSA-2015-0864.html
- http://rhn.redhat.com/errata/RHSA-2015-2152.html
- https://bugzilla.redhat.com/show_bug.cgi?id=1198109
- http://www.securityfocus.com/bid/74293
- http://rhn.redhat.com/errata/RHSA-2015-2411.html
- https://security-tracker.debian.org/tracker/CVE-2014-8171