Exploitation Summary
EIP tracks 1 public exploit for CVE-2014-1739. PoCs published by Salva Peiro.
AI-analyzed exploit summary This exploit demonstrates an information disclosure vulnerability in the Linux kernel (CVE-2014-1739) by leaking kernel stack memory via the media_device_enum_entities() function. It uses an ioctl call to trigger the leak and prints 200 bytes of kernel stack data.
Description
The media_device_enum_entities function in drivers/media/media-device.c in the Linux kernel before 3.14.6 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel memory by leveraging /dev/media0 read access for a MEDIA_IOC_ENUM_ENTITIES ioctl call.
Exploits (1)
This exploit demonstrates an information disclosure vulnerability in the Linux kernel (CVE-2014-1739) by leaking kernel stack memory via the media_device_enum_entities() function. It uses an ioctl call to trigger the leak and prints 200 bytes of kernel stack data.