CVE-2014-3183 — Kernel: HID: heap overflow due to lack of bounds checking

Back Back to CVE browser

MEDIUM

Kernel: HID: heap overflow due to lack of bounds checking

Published Sep 28, 2014

6.9

MEDIUM

CVSS 2.0

EPSS 0.50%

Description

Heap-based buffer overflow in the logi_dj_ll_raw_request function in drivers/hid/hid-logitech-dj.c in the Linux kernel before 3.16.2 allows physically proximate attackers to cause a denial of service (system crash) or possibly execute arbitrary code via a crafted device that specifies a large report size for an LED report.

Affected products

Red Hat Enterprise Linux 5

kernel

Not affected
Red Hat Enterprise Linux 6

kernel

Not affected
Red Hat Enterprise Linux 7

kernel

Not affected
Red Hat Enterprise MRG 2

realtime-kernel

Not affected

Product	Package	State	Advisory
Red Hat Enterprise Linux 5	kernel	Not affected	n/a
Red Hat Enterprise Linux 6	kernel	Not affected	n/a
Red Hat Enterprise Linux 7	kernel	Not affected	n/a
Red Hat Enterprise MRG 2	realtime-kernel	Not affected	n/a

Remediation

Red Hat statement

This issue does not affect the versions of the kernel package as shipped with Red Hat Enterprise Linux 5, 6, 7 and Red Hat Enterprise MRG 2.

Metrics

0.50% 0.00499

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.00499

Score over time

2022–2026

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (10 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	0.50% (0.00499)	40.46th	v5 (v2026.06.15)
Jun 15, 2026	0.50% (0.00499)	38.56th	v5 (v2026.06.15)
Mar 17, 2025	0.17% (0.00165)	35.10th	v4 (v2025.03.14)
Dec 12, 2024	0.08% (0.00080)	36.18th	v3 (v2023.03.01)
Jun 28, 2024	0.08% (0.00080)	34.59th	v3 (v2023.03.01)
Mar 7, 2023	0.08% (0.00080)	32.59th	v3 (v2023.03.01)
Mar 6, 2023	1.75% (0.01755)	76.27th	v2 (v2022.01.01)
Feb 23, 2023	1.75% (0.01755)	76.22th	v2 (v2022.01.01)
Apr 1, 2022	1.75% (0.01755)	74.16th	v2 (v2022.01.01)
Feb 4, 2022	1.75% (0.01755)	53.42th	v2 (v2022.01.01)

Weaknesses (2)

CWE-119

Buffer Overflow

CWE-787

Out-of-bounds Write

References (9)

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=51217e69697fba92a06e07e16f55c9a52d8e8945
x_refsource_CONFIRMBroken Link
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.16.2
x_refsource_CONFIRMMailing ListVendor Advisory
http://www.openwall.com/lists/oss-security/2014/09/11/21
mailing-listx_refsource_MLISTMailing List
https://access.redhat.com/security/cve/CVE-2014-3183
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1141344
x_refsource_CONFIRMIssue Tracking
https://code.google.com/p/google-security-research/issues/detail?id=90
x_refsource_MISCThird Party Advisory
https://github.com/torvalds/linux/commit/51217e69697fba92a06e07e16f55c9a52d8e8945
x_refsource_CONFIRMThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2014-3183
https://www.cve.org/CVERecord?id=CVE-2014-3183

Link	Providers	Tags
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=51217e69697fba92a06e07e16f55c9a52d8e8945		x_refsource_CONFIRMBroken Link
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.16.2		x_refsource_CONFIRMMailing ListVendor Advisory
http://www.openwall.com/lists/oss-security/2014/09/11/21		mailing-listx_refsource_MLISTMailing List
https://access.redhat.com/security/cve/CVE-2014-3183		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1141344		x_refsource_CONFIRMIssue Tracking
https://code.google.com/p/google-security-research/issues/detail?id=90		x_refsource_MISCThird Party Advisory
https://github.com/torvalds/linux/commit/51217e69697fba92a06e07e16f55c9a52d8e8945		x_refsource_CONFIRMThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2014-3183
https://www.cve.org/CVERecord?id=CVE-2014-3183