CVE-2014-3181: Buffer Overflow
Last updated 24 July 2024
Other sources
Linux kernel built with the Human Interface Device(HID) Bus support(CONFIGHID) along with a driver for Apple Magic Mouse/Trackpad multi-touch, is vulnerable to an OOB write flaw. It could occur if a device offers an HID report of arbitrary length.
A local user with physical access to the system could use this flaw to crash the system resulting in DoS or potentially, escalate their privileges on the system.
Upstream fix: ------------- -> https://git.kernel.org/linus/c54def7bd64d7c0b6993336abcffb8444795bf38
— Red Hat
Multiple stack-based buffer overflows in the magicmouserawevent function in drivers/hid/hid-magicmouse.c in the Magic Mouse HID driver in the Linux kernel through 3.16.3 allow physically proximate attackers to cause a denial of service (system crash) or possibly execute arbitrary code via a crafted device that provides a large amount of (1) EHCI or (2) XHCI data associated with an event.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2014-3181?
CVE-2014-3181 is classified as a high severity vulnerability due to its potential for out-of-bounds writes.
How do I fix CVE-2014-3181?
To mitigate CVE-2014-3181, upgrade the Linux kernel to one of the fixed versions, such as 5.10.223-1 or later.
Which versions of the Linux kernel are affected by CVE-2014-3181?
CVE-2014-3181 affects Linux kernel versions between 2.6.37 and 3.16.3.
Is this vulnerability exploitable remotely for CVE-2014-3181?
CVE-2014-3181 is not remotely exploitable as it requires local access to the system.
What components are primarily affected by CVE-2014-3181?
CVE-2014-3181 primarily affects the Human Interface Device (HID) Bus support in the Linux kernel.