CVE-2014-8884: Buffer Overflow

Published Nov 14, 2014
·
Updated

Last updated 24 July 2024

Other sources

Linux kernel built with TechnoTrend/Hauppauge DEC USB driver support is vulnerable to a stack-based buffer overflow flaw.

A local user with write access to the corresponding device could use this flaw to crash the kernel or, potentially, elevate their privileges.

Please note that in order to exploit this issue the TechnoTrend/Hauppauge DEC USB device needs to be plugged in on the system.

Upstream fix: ------------- -> https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f2e323ec96077642d397bb1c355def536d489d16

Reference: ----------- -> http://seclists.org/oss-sec/2014/q4/611

— Red Hat

Stack-based buffer overflow in the ttusbdecfedvbsdiseqcsendmastercmd function in drivers/media/usb/ttusb-dec/ttusbdecfe.c in the Linux kernel before 3.17.4 allows local users to cause a denial of service (system crash) or possibly gain privileges via a large message length in an ioctl call.

— Launchpad

Affected Software

205 affected componentsFixes available
Linux Linux kernel<=3.17.3
Linux Linux kernel=3.0-rc1
Linux Linux kernel=3.0-rc2
Linux Linux kernel=3.0-rc3
Linux Linux kernel=3.0-rc4
Linux Linux kernel=3.0-rc5
Linux Linux kernel=3.0-rc6
Linux Linux kernel=3.0-rc7
Linux Linux kernel=3.0.1
Linux Linux kernel=3.0.2
Linux Linux kernel=3.0.3
Linux Linux kernel=3.0.4
Linux Linux kernel=3.0.5
Linux Linux kernel=3.0.6
Linux Linux kernel=3.0.7
Linux Linux kernel=3.0.8
Linux Linux kernel=3.0.9
Linux Linux kernel=3.0.10
Linux Linux kernel=3.0.11
Linux Linux kernel=3.0.12
Linux Linux kernel=3.0.13
Linux Linux kernel=3.0.14
Linux Linux kernel=3.0.15
Linux Linux kernel=3.0.16
Linux Linux kernel=3.0.17
Linux Linux kernel=3.0.18
Linux Linux kernel=3.0.19
Linux Linux kernel=3.0.20
Linux Linux kernel=3.0.21
Linux Linux kernel=3.0.22
Linux Linux kernel=3.0.23
Linux Linux kernel=3.0.24
Linux Linux kernel=3.0.25
Linux Linux kernel=3.0.26
Linux Linux kernel=3.0.27
Linux Linux kernel=3.0.28
Linux Linux kernel=3.0.29
Linux Linux kernel=3.0.30
Linux Linux kernel=3.0.31
Linux Linux kernel=3.0.32
Linux Linux kernel=3.0.33
Linux Linux kernel=3.0.34
Linux Linux kernel=3.0.35
Linux Linux kernel=3.0.36
Linux Linux kernel=3.0.37
Linux Linux kernel=3.0.38
Linux Linux kernel=3.0.39
Linux Linux kernel=3.0.40
Linux Linux kernel=3.0.41
Linux Linux kernel=3.0.42
Linux Linux kernel=3.0.43
Linux Linux kernel=3.0.44
Linux Linux kernel=3.0.45
Linux Linux kernel=3.0.46
Linux Linux kernel=3.0.47
Linux Linux kernel=3.0.48
Linux Linux kernel=3.0.49
Linux Linux kernel=3.0.50
Linux Linux kernel=3.0.51
Linux Linux kernel=3.0.52
Linux Linux kernel=3.0.53
Linux Linux kernel=3.0.54
Linux Linux kernel=3.0.55
Linux Linux kernel=3.0.56
Linux Linux kernel=3.0.57
Linux Linux kernel=3.0.58
Linux Linux kernel=3.0.59
Linux Linux kernel=3.0.60
Linux Linux kernel=3.0.61
Linux Linux kernel=3.0.62
Linux Linux kernel=3.0.63
Linux Linux kernel=3.0.64
Linux Linux kernel=3.0.65
Linux Linux kernel=3.0.66
Linux Linux kernel=3.0.67
Linux Linux kernel=3.0.68
Linux Linux kernel=3.1
Linux Linux kernel=3.1-rc1
Linux Linux kernel=3.1-rc2
Linux Linux kernel=3.1-rc3
Linux Linux kernel=3.1-rc4
Linux Linux kernel=3.1.1
Linux Linux kernel=3.1.2
Linux Linux kernel=3.1.3
Linux Linux kernel=3.1.4
Linux Linux kernel=3.1.5
Linux Linux kernel=3.1.6
Linux Linux kernel=3.1.7
Linux Linux kernel=3.1.8
Linux Linux kernel=3.1.9
Linux Linux kernel=3.1.10
Linux Linux kernel=3.2
Linux Linux kernel=3.2
Linux Linux kernel=3.2-rc2
Linux Linux kernel=3.2-rc3
Linux Linux kernel=3.10
Linux Linux kernel=3.10.0
Linux Linux kernel=3.10.1
Linux Linux kernel=3.10.1
Linux Linux kernel=3.10.2
Linux Linux kernel=3.10.2
Linux Linux kernel=3.10.3
Linux Linux kernel=3.10.3
Linux Linux kernel=3.10.4
Linux Linux kernel=3.10.4
Linux Linux kernel=3.10.5
Linux Linux kernel=3.10.5
Linux Linux kernel=3.10.6
Linux Linux kernel=3.10.6
Linux Linux kernel=3.10.7
Linux Linux kernel=3.10.7
Linux Linux kernel=3.10.8
Linux Linux kernel=3.10.8
Linux Linux kernel=3.10.9
Linux Linux kernel=3.10.9
Linux Linux kernel=3.10.10
Linux Linux kernel=3.10.11
Linux Linux kernel=3.10.12
Linux Linux kernel=3.10.13
Linux Linux kernel=3.10.14
Linux Linux kernel=3.10.15
Linux Linux kernel=3.10.16
Linux Linux kernel=3.10.17
Linux Linux kernel=3.10.18
Linux Linux kernel=3.10.19
Linux Linux kernel=3.10.20
Linux Linux kernel=3.10.21
Linux Linux kernel=3.10.22
Linux Linux kernel=3.10.23
Linux Linux kernel=3.10.24
Linux Linux kernel=3.10.25
Linux Linux kernel=3.10.26
Linux Linux kernel=3.10.27
Linux Linux kernel=3.10.28
Linux Linux kernel=3.10.29
Linux Linux kernel=3.11
Linux Linux kernel=3.11.1
Linux Linux kernel=3.11.2
Linux Linux kernel=3.11.3
Linux Linux kernel=3.11.4
Linux Linux kernel=3.11.5
Linux Linux kernel=3.11.6
Linux Linux kernel=3.11.7
Linux Linux kernel=3.11.8
Linux Linux kernel=3.11.9
Linux Linux kernel=3.11.10
Linux Linux kernel=3.12
Linux Linux kernel=3.12.1
Linux Linux kernel=3.12.2
Linux Linux kernel=3.12.3
Linux Linux kernel=3.12.4
Linux Linux kernel=3.12.5
Linux Linux kernel=3.12.6
Linux Linux kernel=3.12.7
Linux Linux kernel=3.12.8
Linux Linux kernel=3.12.9
Linux Linux kernel=3.12.10
Linux Linux kernel=3.12.11
Linux Linux kernel=3.12.12
Linux Linux kernel=3.12.13
Linux Linux kernel=3.12.14
Linux Linux kernel=3.12.15
Linux Linux kernel=3.12.16
Linux Linux kernel=3.12.17
Linux Linux kernel=3.13
Linux Linux kernel=3.13.1
Linux Linux kernel=3.13.2
Linux Linux kernel=3.13.3
Linux Linux kernel=3.13.4
Linux Linux kernel=3.13.5
Linux Linux kernel=3.13.6
Linux Linux kernel=3.13.7
Linux Linux kernel=3.13.8
Linux Linux kernel=3.13.9
Linux Linux kernel=3.13.10
Linux Linux kernel=3.13.11
Linux Linux kernel=3.14
Linux Linux kernel=3.14-rc1
Linux Linux kernel=3.14-rc2
Linux Linux kernel=3.14-rc3
Linux Linux kernel=3.14-rc4
Linux Linux kernel=3.14-rc5
Linux Linux kernel=3.14-rc6
Linux Linux kernel=3.14-rc7
Linux Linux kernel=3.14-rc8
Linux Linux kernel=3.14.1
Linux Linux kernel=3.14.2
Linux Linux kernel=3.14.3
Linux Linux kernel=3.14.4
Linux Linux kernel=3.14.5
Linux Linux kernel=3.15
Linux Linux kernel=3.15.1
Linux Linux kernel=3.15.2
Linux Linux kernel=3.15.3
Linux Linux kernel=3.15.4
Linux Linux kernel=3.15.5
Linux Linux kernel=3.15.6
Linux Linux kernel=3.15.7
Linux Linux kernel=3.15.8
Linux Linux kernel=3.16.0
Linux Linux kernel=3.16.1
Linux Linux kernel=3.17
Linux Linux kernel=3.17.1
Linux Linux kernel=3.17.2
debian/linux
5.10.223-15.10.234-16.1.129-16.1.135-16.12.25-1

Remediation

Patch Available

https://git.kernel.org/linus/1da177e4c3f41524e886b7f1b8a0c1fc7321cac2

Patch Available

https://git.kernel.org/linus/f2e323ec96077642d397bb1c355def536d489d16

Event History

Nov 14, 2014
Data Sourced
via Red Hat·02:02 PM
DescriptionSeverityAffected Software
Nov 30, 2014
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Jan 11, 2024
Data Sourced
via Launchpad·10:07 PM
Description
Sep 16, 2024
Data Sourced
via Ubuntu·01:05 AM
RemedyDescriptionSeverityAffected Software
Feb 23, 2025
Data Sourced
via Debian·01:59 AM
DescriptionAffected Software

Frequently Asked Questions

1

What is the severity of CVE-2014-8884?

CVE-2014-8884 is considered a high severity vulnerability due to its potential to allow privilege escalation or kernel crashes.

2

How do I fix CVE-2014-8884?

To address CVE-2014-8884, update to the recommended patched versions of the Linux kernel including 5.10.223-1, 5.10.226-1, 6.1.123-1, or newer.

3

Which versions of the Linux kernel are affected by CVE-2014-8884?

CVE-2014-8884 affects multiple versions of the Linux kernel, specifically those up to and including 3.17.3.

4

What type of vulnerability is CVE-2014-8884?

CVE-2014-8884 is a stack-based buffer overflow vulnerability affecting the TechnoTrend/Hauppauge DEC USB driver.

5

Can CVE-2014-8884 be exploited remotely?

CVE-2014-8884 requires local access for exploitation, so it cannot be directly exploited remotely.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203