Vulnerability Details CVE-2014-8171
The memory resource controller (aka memcg) in the Linux kernel allows local users to cause a denial of service (deadlock) by spawning new processes within a memory-constrained cgroup.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 15.2%
CVSS Severity
CVSS v3 Score 5.5
CVSS v2 Score 4.9
References
- http://rhn.redhat.com/errata/RHSA-2015-0864.html
- http://rhn.redhat.com/errata/RHSA-2015-2152.html
- http://rhn.redhat.com/errata/RHSA-2015-2411.html
- http://rhn.redhat.com/errata/RHSA-2016-0068.html
- http://www.securityfocus.com/bid/74293
- https://bugzilla.redhat.com/show_bug.cgi?id=1198109
- http://rhn.redhat.com/errata/RHSA-2015-0864.html
- http://rhn.redhat.com/errata/RHSA-2015-2152.html
- http://rhn.redhat.com/errata/RHSA-2015-2411.html
- http://rhn.redhat.com/errata/RHSA-2016-0068.html
- http://www.securityfocus.com/bid/74293
- https://bugzilla.redhat.com/show_bug.cgi?id=1198109
Products affected by CVE-2014-8171
-
cpe:2.3:o:linux:linux_kernel:-
-
cpe:2.3:o:redhat:enterprise_linux:6.0
-
cpe:2.3:o:redhat:enterprise_linux:7.0
-
cpe:2.3:o:redhat:enterprise_mrg:2.0