CVE:CVE-2014-0069
CNNVD:CNNVD-201402-478
Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。NFSv4 implementation是其中的一个分布式文件系统协议。
Linux kernel 3.13.5及之前的版本中的fs/cifs/file.c文件中的‘cifs_iovec_write’函数存在缓冲区溢出漏洞，该漏洞源于程序没有正确处理非缓存的写操作。本地攻击者可利用该漏洞获取内核内存的敏感信息，造成拒绝服务（内存损坏和系统崩溃）或提升权限。
solution:Upgrade linux linux_kernel to a higher version than 3.13.5,and avoid the version (,3.13.5]; Upgrade suse linux_enterprise_desktop to a higher version than 11:sp3,and avoid the version 11:sp3; Upgrade suse linux_enterprise_server to a higher version than 11,11:sp3,and avoid the version 11,11:sp3; Upgrade redhat enterprise_linux_desktop to a higher version than 6.0,and avoid the version 6.0; Upgrade redhat enterprise_linux_eus to a higher version than 6.5,and avoid the version 6.5; Upgrade redhat enterprise_linux_server to a higher version than 6.0,and avoid the version 6.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 6.5,and avoid the version 6.5; Upgrade redhat enterprise_linux_server_tus to a higher version than 6.5,and avoid the version 6.5; Upgrade redhat enterprise_linux_workstation to a higher version than 6.0,and avoid the version 6.0