CVE-2014-9114: fedoraproject fedora Command Injection
CVSS: 7.8v3.1HighModified
AliasesMGASA-2014-0517SUSE-SU-2015:0270-1UBUNTU-CVE-2014-9114DEBIAN-CVE-2014-9114
Published 31-03-2017Last modified 04-12-2025
Some data may be incomplete
- 2 references with an unsupported link type were hidden.
Vulnerability summary
CVE-2014-9114 is a high (CVSS 7.8) Command Injection vulnerability in fedoraproject fedora. EPSS estimates a 0.64% chance of exploitation in the next 30 days, higher than 49.7% of scored vulnerabilities.
CVSS score
7.8/10
010
High · v3.1 (CVE.org)EPSS score
0.64%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 1 · Related 1Timeline
- 31-03-2017PublishedVulnerability first disclosed.
- 04-12-2025Last modifiedVulnerability information updated.
Description
Blkid in util-linux before 2.26rc-1 allows local users to execute arbitrary code.
CVSS metrics
7 scores · 4 sources · 3 versionsHigh 7.8Preferred score · CVE.org (CNA)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HSourcesAll 3 agree
- NVDNIST7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- OSV · UbuntuEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
High 7.8Preferred score · NVD (NIST)
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HSourcesAll 3 agree
- OSV · UbuntuEcosystem advisory · calculated7.8HighCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated7.8HighCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
High 7.2Preferred score · NVD (NIST)
AV:L/AC:L/Au:N/C:C/I:C/A:CSourcesSingle source
EPSS trend
Probability
0.64%
Chance of exploitation in the next 30 days
Percentile
50%
Versus all other CVEs
30-day change
0.00 pp
From 0.64% on 18-09-2026
18-09-202618-10-2026
EPSS score0.64%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Suse11 products
- python-libmount&distro=SUSE Linux Enterprise Desktop 12< 2.25-10.3
- python-libmount&distro=SUSE Linux Enterprise Server 12< 2.25-10.3
- python-libmount&distro=SUSE Linux Enterprise Server for SAP Applications 12< 2.25-10.3
- util-linux-systemd&distro=SUSE Linux Enterprise Desktop 12< 2.25-10.1
- util-linux-systemd&distro=SUSE Linux Enterprise Server 12< 2.25-10.1
Debian1 product
- util-linux< 2.25.2-4
Fedoraproject1 product
- fedoraEOL20 | 21
Kernel1 product
- util-linux≤ 2.24.2-1
Mageia1 product
- util-linux< 2.24.2-1.mga4
Opensuse1 product
- opensuseEOL13.1 | 13.2
Ubuntu1 product
- util-linuxAll versions (No fix recorded)
7 vendors · 17 products
References
22 links- lists.fedoraproject.org/pipermail/package-announce/2014-December/146229.htmlVendor AdvisoryX Refsource FEDORAThird Party Advisory
- www.openwall.com/lists/oss-security/2014/11/26/21Mailing ListX Refsource MLISTPatchThird Party Advisory
- bugzilla.redhat.com/show_bug.cgi?id=1168485X Refsource CONFIRMIssue TrackingPatchThird Party AdvisoryVDB Entry
- github.com/karelzak/util-linux/commit/89e90ae7b2826110ea28c1c0eb8e7c56c3907bdcX Refsource CONFIRMPatchThird Party Advisory
- lists.opensuse.org/opensuse-updates/2015-01/msg00035.htmlVendor AdvisoryX Refsource SUSEThird Party Advisory
- lists.fedoraproject.org/pipermail/package-announce/2014-December/145188.htmlVendor AdvisoryX Refsource FEDORAThird Party Advisory
Show all 22 references
- bugzilla.suse.com/907434REPORT
- bugzilla.suse.com/908742REPORT
