Oval Definition:oval:org.opensuse.security:def:20149710
Revision Date:2022-09-02Version:1
Title:CVE-2014-9710
Description:

The Btrfs implementation in the Linux kernel before 3.19 does not ensure that the visible xattr state is consistent with a requested replacement, which allows local users to bypass intended ACL settings and gain privileges via standard filesystem operations (1) during an xattr-replacement time window, related to a race condition, or (2) after an xattr-replacement attempt that fails because the data does not fit.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2014-9710
Mitre CVE-2014-9710
SUSE CVE-2014-9710
SUSE-SU-2015:1489-1
SUSE-SU-2015:1489-1
SUSE-SU-2019:14089-1
SUSE-SU-2019:14089-1
Platform(s):SUSE Linux Enterprise Desktop 11 SP2
SUSE Linux Enterprise Desktop 12 SP3
SUSE Linux Enterprise Desktop 12 SP4
SUSE Linux Enterprise Desktop 15 SP2
SUSE Linux Enterprise Desktop 15 SP3
SUSE Linux Enterprise High Performance Computing 12 SP5
SUSE Linux Enterprise High Performance Computing 15 SP2
SUSE Linux Enterprise High Performance Computing 15 SP3
SUSE Linux Enterprise Live Patching 12
SUSE Linux Enterprise Micro 5.0
SUSE Linux Enterprise Micro 5.1
SUSE Linux Enterprise Module for Basesystem 15 SP2
SUSE Linux Enterprise Module for Basesystem 15 SP3
SUSE Linux Enterprise Module for Development Tools 15 SP2
SUSE Linux Enterprise Module for Development Tools 15 SP3
SUSE Linux Enterprise Module for Legacy 15 SP3
SUSE Linux Enterprise Server 11 SP1
SUSE Linux Enterprise Server 11 SP2
SUSE Linux Enterprise Server 11 SP3-TERADATA
SUSE Linux Enterprise Server 11 SP4-LTSS
SUSE Linux Enterprise Server 12 SP3
SUSE Linux Enterprise Server 12 SP4
SUSE Linux Enterprise Server 12 SP5
SUSE Linux Enterprise Server 15 SP2
SUSE Linux Enterprise Server 15 SP3
SUSE Linux Enterprise Server for SAP Applications 11 SP3-TERADATA
SUSE Linux Enterprise Server for SAP Applications 11 SP4-LTSS
SUSE Linux Enterprise Server for SAP Applications 12 SP3
SUSE Linux Enterprise Server for SAP Applications 12 SP4
SUSE Linux Enterprise Server for SAP Applications 12 SP5
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server for SAP Applications 15 SP2
SUSE Linux Enterprise Server for SAP Applications 15 SP3
SUSE Linux Enterprise Storage 7
SUSE Linux Enterprise Storage 7.1
SUSE Linux Enterprise Workstation Extension 15 SP3
SUSE Manager Proxy 4.1
SUSE Manager Proxy 4.2
SUSE Manager Retail Branch Server 4.1
SUSE Manager Retail Branch Server 4.2
SUSE Manager Server 4.1
SUSE Manager Server 4.2
SUSE OpenStack Cloud 8
SUSE OpenStack Cloud 9
SUSE OpenStack Cloud Crowbar 8
SUSE OpenStack Cloud Crowbar 9
Product(s):
Definition Synopsis
  • SUSE Linux Enterprise Live Patching 12 is installed
  • AND Package Information
  • kgraft-patch-3_12_32-33-default-3-2 is installed
  • OR kgraft-patch-3_12_32-33-xen-3-2 is installed
  • OR kgraft-patch-SLE12_Update_1-3-2 is installed
  • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Desktop 12 SP3 is installed
  • OR SUSE Linux Enterprise Desktop 12 SP4 is installed
  • AND Package Information
  • kernel-default is not affected
  • OR kernel-source is not affected
  • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Server 11 SP3-TERADATA is installed
  • OR SUSE Linux Enterprise Server for SAP Applications 11 SP3-TERADATA is installed
  • AND Package Information
  • kernel-default-3.0.101-0.63.TDC is installed
  • OR kernel-default-base-3.0.101-0.63.TDC is installed
  • OR kernel-default-devel-3.0.101-0.63.TDC is installed
  • OR kernel-source-3.0.101-0.63.TDC is installed
  • OR kernel-syms-3.0.101-0.63.TDC is installed
  • OR kernel-trace-3.0.101-0.63.TDC is installed
  • OR kernel-trace-base-3.0.101-0.63.TDC is installed
  • OR kernel-trace-devel-3.0.101-0.63.TDC is installed
  • OR kernel-xen-3.0.101-0.63.TDC is installed
  • OR kernel-xen-base-3.0.101-0.63.TDC is installed
  • OR kernel-xen-devel-3.0.101-0.63.TDC is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 11 SP3-TERADATA is installed
  • AND Package Information
  • kernel-default-3.0.101-0.63.TDC is installed
  • OR kernel-default-base-3.0.101-0.63.TDC is installed
  • OR kernel-default-devel-3.0.101-0.63.TDC is installed
  • OR kernel-source-3.0.101-0.63.TDC is installed
  • OR kernel-syms-3.0.101-0.63.TDC is installed
  • OR kernel-trace-3.0.101-0.63.TDC is installed
  • OR kernel-trace-base-3.0.101-0.63.TDC is installed
  • OR kernel-trace-devel-3.0.101-0.63.TDC is installed
  • OR kernel-xen-3.0.101-0.63.TDC is installed
  • OR kernel-xen-base-3.0.101-0.63.TDC is installed
  • OR kernel-xen-devel-3.0.101-0.63.TDC is installed
  • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Server 11 SP4-LTSS is installed
  • OR SUSE Linux Enterprise Server for SAP Applications 11 SP4-LTSS is installed
  • AND Package Information
  • kernel-bigmem-3.0.101-108.95 is installed
  • OR kernel-bigmem-base-3.0.101-108.95 is installed
  • OR kernel-bigmem-devel-3.0.101-108.95 is installed
  • OR kernel-default-3.0.101-108.95 is installed
  • OR kernel-default-base-3.0.101-108.95 is installed
  • OR kernel-default-devel-3.0.101-108.95 is installed
  • OR kernel-default-man-3.0.101-108.95 is installed
  • OR kernel-ec2-3.0.101-108.95 is installed
  • OR kernel-ec2-base-3.0.101-108.95 is installed
  • OR kernel-ec2-devel-3.0.101-108.95 is installed
  • OR kernel-pae-3.0.101-108.95 is installed
  • OR kernel-pae-base-3.0.101-108.95 is installed
  • OR kernel-pae-devel-3.0.101-108.95 is installed
  • OR kernel-ppc64-3.0.101-108.95 is installed
  • OR kernel-ppc64-base-3.0.101-108.95 is installed
  • OR kernel-ppc64-devel-3.0.101-108.95 is installed
  • OR kernel-source-3.0.101-108.95 is installed
  • OR kernel-syms-3.0.101-108.95 is installed
  • OR kernel-trace-3.0.101-108.95 is installed
  • OR kernel-trace-base-3.0.101-108.95 is installed
  • OR kernel-trace-devel-3.0.101-108.95 is installed
  • OR kernel-xen-3.0.101-108.95 is installed
  • OR kernel-xen-base-3.0.101-108.95 is installed
  • OR kernel-xen-devel-3.0.101-108.95 is installed
  • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Module for Development Tools 15 SP2 is installed
  • AND
  • kernel-default is not affected
  • OR kernel-source is not affected
  • OR Package Information
  • SUSE Linux Enterprise Module for Basesystem 15 SP2 is installed
  • AND
  • kernel-default is not affected
  • OR kernel-default-devel is not affected
  • OR kernel-devel is not affected
  • OR kernel-macros is not affected
  • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Desktop 11 SP2 is installed
  • OR SUSE Linux Enterprise Server 11 SP1 is installed
  • OR SUSE Linux Enterprise Server 11 SP2 is installed
  • AND
  • kernel-default is not affected
  • OR kernel-source is not affected
  • OR Package Information
  • SUSE Linux Enterprise Server 11 SP4-LTSS is installed
  • AND
  • kernel-bigmem-3.0.101-108.95.2 is installed
  • OR kernel-bigmem-base-3.0.101-108.95.2 is installed
  • OR kernel-bigmem-devel-3.0.101-108.95.2 is installed
  • OR kernel-default-3.0.101-108.95.2 is installed
  • OR kernel-default-base-3.0.101-108.95.2 is installed
  • OR kernel-default-devel-3.0.101-108.95.2 is installed
  • OR kernel-default-man-3.0.101-108.95.2 is installed
  • OR kernel-ec2-3.0.101-108.95.2 is installed
  • OR kernel-ec2-base-3.0.101-108.95.2 is installed
  • OR kernel-ec2-devel-3.0.101-108.95.2 is installed
  • OR kernel-pae-3.0.101-108.95.2 is installed
  • OR kernel-pae-base-3.0.101-108.95.2 is installed
  • OR kernel-pae-devel-3.0.101-108.95.2 is installed
  • OR kernel-ppc64-3.0.101-108.95.2 is installed
  • OR kernel-ppc64-base-3.0.101-108.95.2 is installed
  • OR kernel-ppc64-devel-3.0.101-108.95.2 is installed
  • OR kernel-source-3.0.101-108.95.1 is installed
  • OR kernel-syms-3.0.101-108.95.1 is installed
  • OR kernel-trace-3.0.101-108.95.2 is installed
  • OR kernel-trace-base-3.0.101-108.95.2 is installed
  • OR kernel-trace-devel-3.0.101-108.95.2 is installed
  • OR kernel-xen-3.0.101-108.95.2 is installed
  • OR kernel-xen-base-3.0.101-108.95.2 is installed
  • OR kernel-xen-devel-3.0.101-108.95.2 is installed
  • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Desktop 12 SP3 is installed
  • OR SUSE Linux Enterprise Desktop 12 SP4 is installed
  • OR SUSE Linux Enterprise High Performance Computing 12 SP5 is installed
  • OR SUSE Linux Enterprise Server 12 SP3 is installed
  • OR SUSE Linux Enterprise Server 12 SP4 is installed
  • OR SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed
  • AND
  • kernel-default is not affected
  • OR kernel-source is not affected
  • OR Package Information
  • SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed
  • AND
  • kernel-default is not affected
  • OR kernel-default-base is not affected
  • OR kernel-default-devel is not affected
  • OR kernel-devel is not affected
  • OR kernel-macros is not affected
  • OR kernel-source is not affected
  • OR Package Information
  • SUSE Linux Enterprise Server 12 SP5 is installed
  • AND
  • kernel-default is not affected
  • OR kernel-default-base is not affected
  • OR kernel-default-devel is not affected
  • OR kernel-default-man is not affected
  • OR kernel-devel is not affected
  • OR kernel-macros is not affected
  • OR kernel-source is not affected
  • OR Package Information
  • SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed
  • AND
  • kernel-default is not affected
  • OR kernel-default-base is not affected
  • OR kernel-default-devel is not affected
  • OR kernel-default-kgraft is not affected
  • OR kernel-devel is not affected
  • OR kernel-macros is not affected
  • OR kernel-source is not affected
  • OR Package Information
  • SUSE Linux Enterprise Live Patching 12 is installed
  • AND
  • kgraft-patch-3_12_32-33-default-3-2.1 is installed
  • OR kgraft-patch-3_12_32-33-xen-3-2.1 is installed
  • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Workstation Extension 15 SP3 is installed
  • AND kernel-default-extra is not affected
  • OR Package Information
  • SUSE Linux Enterprise Module for Legacy 15 SP3 is installed
  • AND reiserfs-kmp-default is not affected
  • OR Package Information
  • SUSE Linux Enterprise Module for Development Tools 15 SP3 is installed
  • AND
  • kernel-default is not affected
  • OR kernel-source is not affected
  • OR kernel-syms is not affected
  • OR Package Information
  • SUSE Linux Enterprise Module for Development Tools 15 SP2 is installed
  • AND
  • kernel-default is not affected
  • OR kernel-source is not affected
  • OR Package Information
  • SUSE Linux Enterprise Module for Basesystem 15 SP2 is installed
  • OR SUSE Linux Enterprise Module for Basesystem 15 SP3 is installed
  • AND
  • kernel-default is not affected
  • OR kernel-default-devel is not affected
  • OR kernel-devel is not affected
  • OR kernel-macros is not affected
  • OR Package Information
  • SUSE Linux Enterprise Server for SAP Applications 15 is installed
  • AND
  • kernel-default is not affected
  • OR kernel-default-base is not affected
  • OR kernel-default-devel is not affected
  • OR reiserfs-kmp-default is not affected
  • OR kernel-devel is not affected
  • OR kernel-macros is not affected
  • OR kernel-source is not affected
  • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Desktop 15 SP3 is installed
  • OR SUSE Linux Enterprise Server 15 SP3 is installed
  • OR SUSE Linux Enterprise Server for SAP Applications 15 SP3 is installed
  • OR SUSE Linux Enterprise Workstation Extension 15 SP3 is installed
  • AND kernel-default-extra is not affected
  • OR Package Information
  • SUSE Linux Enterprise High Performance Computing 15 SP3 is installed
  • OR SUSE Linux Enterprise Module for Legacy 15 SP3 is installed
  • OR SUSE Linux Enterprise Server 15 SP3 is installed
  • OR SUSE Linux Enterprise Server for SAP Applications 15 SP3 is installed
  • OR SUSE Linux Enterprise Storage 7.1 is installed
  • OR SUSE Manager Proxy 4.2 is installed
  • OR SUSE Manager Retail Branch Server 4.2 is installed
  • OR SUSE Manager Server 4.2 is installed
  • AND reiserfs-kmp-default is not affected
  • OR Package Information
  • SUSE Linux Enterprise Desktop 15 SP3 is installed
  • OR SUSE Linux Enterprise High Performance Computing 15 SP3 is installed
  • OR SUSE Linux Enterprise Module for Development Tools 15 SP3 is installed
  • OR SUSE Linux Enterprise Server 15 SP3 is installed
  • OR SUSE Linux Enterprise Server for SAP Applications 15 SP3 is installed
  • OR SUSE Linux Enterprise Storage 7.1 is installed
  • OR SUSE Manager Proxy 4.2 is installed
  • OR SUSE Manager Retail Branch Server 4.2 is installed
  • OR SUSE Manager Server 4.2 is installed
  • AND
  • kernel-default is not affected
  • OR kernel-source is not affected
  • OR kernel-syms is not affected
  • OR Package Information
  • SUSE Linux Enterprise Desktop 15 SP3 is installed
  • OR SUSE Linux Enterprise High Performance Computing 15 SP3 is installed
  • OR SUSE Linux Enterprise Module for Basesystem 15 SP3 is installed
  • OR SUSE Linux Enterprise Server 15 SP3 is installed
  • OR SUSE Linux Enterprise Server for SAP Applications 15 SP3 is installed
  • OR SUSE Linux Enterprise Storage 7.1 is installed
  • OR SUSE Manager Proxy 4.2 is installed
  • OR SUSE Manager Retail Branch Server 4.2 is installed
  • OR SUSE Manager Server 4.2 is installed
  • AND
  • kernel-default is not affected
  • OR kernel-default-devel is not affected
  • OR kernel-devel is not affected
  • OR kernel-macros is not affected
  • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Server 11 SP1 is installed
  • OR SUSE Linux Enterprise Server 11 SP2 is installed
  • AND
  • kernel-default is not affected
  • OR kernel-source is not affected
  • OR Package Information
  • SUSE Linux Enterprise Server 11 SP4-LTSS is installed
  • AND
  • kernel-bigmem-3.0.101-108.95.2 is installed
  • OR kernel-bigmem-base-3.0.101-108.95.2 is installed
  • OR kernel-bigmem-devel-3.0.101-108.95.2 is installed
  • OR kernel-default-3.0.101-108.95.2 is installed
  • OR kernel-default-base-3.0.101-108.95.2 is installed
  • OR kernel-default-devel-3.0.101-108.95.2 is installed
  • OR kernel-default-man-3.0.101-108.95.2 is installed
  • OR kernel-ec2-3.0.101-108.95.2 is installed
  • OR kernel-ec2-base-3.0.101-108.95.2 is installed
  • OR kernel-ec2-devel-3.0.101-108.95.2 is installed
  • OR kernel-pae-3.0.101-108.95.2 is installed
  • OR kernel-pae-base-3.0.101-108.95.2 is installed
  • OR kernel-pae-devel-3.0.101-108.95.2 is installed
  • OR kernel-ppc64-3.0.101-108.95.2 is installed
  • OR kernel-ppc64-base-3.0.101-108.95.2 is installed
  • OR kernel-ppc64-devel-3.0.101-108.95.2 is installed
  • OR kernel-source-3.0.101-108.95.1 is installed
  • OR kernel-syms-3.0.101-108.95.1 is installed
  • OR kernel-trace-3.0.101-108.95.2 is installed
  • OR kernel-trace-base-3.0.101-108.95.2 is installed
  • OR kernel-trace-devel-3.0.101-108.95.2 is installed
  • OR kernel-xen-3.0.101-108.95.2 is installed
  • OR kernel-xen-base-3.0.101-108.95.2 is installed
  • OR kernel-xen-devel-3.0.101-108.95.2 is installed
  • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Server 12 SP3 is installed
  • OR SUSE Linux Enterprise Server 12 SP4 is installed
  • OR SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed
  • AND
  • kernel-default is not affected
  • OR kernel-source is not affected
  • OR Package Information
  • SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed
  • AND
  • kernel-default is not affected
  • OR kernel-default-base is not affected
  • OR kernel-default-devel is not affected
  • OR kernel-devel is not affected
  • OR kernel-macros is not affected
  • OR kernel-source is not affected
  • OR Package Information
  • SUSE Linux Enterprise Server 12 SP5 is installed
  • AND
  • kernel-default is not affected
  • OR kernel-default-base is not affected
  • OR kernel-default-devel is not affected
  • OR kernel-default-man is not affected
  • OR kernel-devel is not affected
  • OR kernel-macros is not affected
  • OR kernel-source is not affected
  • OR Package Information
  • SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed
  • AND
  • kernel-default is not affected
  • OR kernel-default-base is not affected
  • OR kernel-default-devel is not affected
  • OR kernel-default-kgraft is not affected
  • OR kernel-devel is not affected
  • OR kernel-macros is not affected
  • OR kernel-source is not affected
  • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Desktop 15 SP3 is installed
  • OR SUSE Linux Enterprise High Performance Computing 15 SP3 is installed
  • OR SUSE Linux Enterprise Module for Development Tools 15 SP3 is installed
  • OR SUSE Linux Enterprise Server 15 SP3 is installed
  • OR SUSE Linux Enterprise Server for SAP Applications 15 SP3 is installed
  • OR SUSE Linux Enterprise Storage 7.1 is installed
  • OR SUSE Manager Proxy 4.2 is installed
  • OR SUSE Manager Retail Branch Server 4.2 is installed
  • OR SUSE Manager Server 4.2 is installed
  • AND
  • kernel-default is not affected
  • OR kernel-source is not affected
  • OR Package Information
  • SUSE Linux Enterprise Desktop 15 SP3 is installed
  • OR SUSE Linux Enterprise High Performance Computing 15 SP3 is installed
  • OR SUSE Linux Enterprise Module for Basesystem 15 SP3 is installed
  • OR SUSE Linux Enterprise Server 15 SP3 is installed
  • OR SUSE Linux Enterprise Server for SAP Applications 15 SP3 is installed
  • OR SUSE Linux Enterprise Storage 7.1 is installed
  • OR SUSE Manager Proxy 4.2 is installed
  • OR SUSE Manager Retail Branch Server 4.2 is installed
  • OR SUSE Manager Server 4.2 is installed
  • AND
  • kernel-default is not affected
  • OR kernel-default-devel is not affected
  • OR kernel-devel is not affected
  • OR kernel-macros is not affected
  • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Server 12 SP3 is installed
  • AND
  • kernel-default is not affected
  • OR kernel-source is not affected
  • OR Package Information
  • SUSE OpenStack Cloud 8 is installed
  • OR SUSE OpenStack Cloud Crowbar 8 is installed
  • AND
  • kernel-default is not affected
  • OR kernel-default-base is not affected
  • OR kernel-default-devel is not affected
  • OR kernel-default-kgraft is not affected
  • OR kernel-devel is not affected
  • OR kernel-macros is not affected
  • OR kernel-source is not affected
  • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Server 12 SP4 is installed
  • AND
  • kernel-default is not affected
  • OR kernel-source is not affected
  • OR Package Information
  • SUSE OpenStack Cloud 9 is installed
  • OR SUSE OpenStack Cloud Crowbar 9 is installed
  • AND
  • kernel-default is not affected
  • OR kernel-default-base is not affected
  • OR kernel-default-devel is not affected
  • OR kernel-devel is not affected
  • OR kernel-macros is not affected
  • OR kernel-source is not affected
  • Definition Synopsis
  • SUSE Linux Enterprise Micro 5.0 is installed
  • AND kernel-default is not affected
  • Definition Synopsis
  • SUSE Linux Enterprise Micro 5.1 is installed
  • AND kernel-default is not affected
  • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise High Performance Computing 12 SP5 is installed
  • OR SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed
  • AND
  • kernel-default is not affected
  • OR kernel-source is not affected
  • OR Package Information
  • SUSE Linux Enterprise Server 12 SP5 is installed
  • AND
  • kernel-default is not affected
  • OR kernel-default-base is not affected
  • OR kernel-default-devel is not affected
  • OR kernel-default-man is not affected
  • OR kernel-devel is not affected
  • OR kernel-macros is not affected
  • OR kernel-source is not affected
  • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Desktop 12 SP4 is installed
  • OR SUSE Linux Enterprise Server 12 SP4 is installed
  • AND
  • kernel-default is not affected
  • OR kernel-source is not affected
  • OR Package Information
  • SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed
  • AND
  • kernel-default is not affected
  • OR kernel-default-base is not affected
  • OR kernel-default-devel is not affected
  • OR kernel-devel is not affected
  • OR kernel-macros is not affected
  • OR kernel-source is not affected
  • BACK