PT-2013-6347 · Linux+4 · Linux Kernel+8

Sasha Levin · Publicado 1970-01-01 · Atualizado 2020-08-28 · CVE-2014-2678

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.14 SUSE Linux Enterprise kernel-pae-devel (affected versions not specified) SUSE Linux Enterprise kernel-xen-devel (affected versions not specified) SUSE Linux Enterprise gfs2-kmp-xen (affected versions not specified) SUSE Linux Enterprise kernel-ec2-devel (affected versions not specified)

Description The issue concerns multiple vulnerabilities in the Linux kernel and various SUSE Linux Enterprise packages, which can be exploited remotely to compromise the confidentiality, integrity, and availability of protected information. A specific function, rds iw laddr check, in the Linux kernel through version 3.14, allows local users to cause a denial of service or possibly have other unspecified impacts via a bind system call for an RDS socket on a system lacking RDS transports.

Recommendations For Linux kernel versions prior to 3.14, update to a version 3.14 or later to resolve the issue. For SUSE Linux Enterprise kernel-pae-devel, kernel-xen-devel, gfs2-kmp-xen, and kernel-ec2-devel, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

NULL Pointer Dereference

Enumeração de Fraquezas

CWE-476

Identificadores relacionados

ALT-PU-2014-1602

ALT-PU-2014-2064

BDU:2015-04307

BDU:2015-04308

BDU:2015-04309

BDU:2015-04310

CESA-2014_0981

CVE-2014-2678

DLA-0015-1

OPENSUSE-SU-2014_0840-1

OPENSUSE-SU-2014_0856-1

RHSA-2014:0557

RHSA-2014:0926

RHSA-2014:0981

RHSA-2014:1101

RHSA-2014_0926

RHSA-2014_0981

SUSE-RU-2015:0621-1

SUSE-SU-2015:0481-1

SUSE-SU-2015:0581-1

SUSE-SU-2015:0652-1

SUSE-SU-2015:0736-1

SUSE-SU-2015:1174-1

SUSE-SU-2015:1376-1

USN-2219-1

USN-2220-1

USN-2221-1

USN-2223-1

USN-2224-1

USN-2225-1

USN-2227-1

USN-2228-1

Produtos afetados

Alt Linux

Centos

Linux Kernel

Red Hat

Suse Linux Enterprise Gfs2-Kmp-Xen

Suse Linux Enterprise Kernel-Ec2-Devel

Suse Linux Enterprise Kernel-Pae-Devel

Suse Linux Enterprise Kernel-Xen-Devel

Suse

Referências · 368

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/android/local/futex_requeue.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/recvmmsg_priv_esc.rb · Exploit
• 🔥 https://github.com/saelo/cve-2014-0038 · Exploit
• 🔥 https://github.com/timwr/CVE-2014-3153 · Exploit
• 🔥 https://github.com/android-rooting-tools/libfutex_exploit · Exploit
• 🔥 https://github.com/lieanu/CVE-2014-3153 · Exploit
• 🔥 https://github.com/elongl/CVE-2014-3153 · Exploit
• 🔥 https://github.com/zerodavinci/CVE-2014-3153-exploit · Exploit
• 🔥 https://github.com/tempbottle/CVE-2014-0196 · Exploit
• https://github.com/torvalds/linux/commit/05ab8f2647e4221cbdb3856dd7d32bd5407316b3 · Nota
• https://github.com/torvalds/linux/commit/4291086b1f081b869c6d79e5b7441633dc3ace00 · Nota
• https://github.com/torvalds/linux/commit/c88547a8119e3b581318ab65e9b72f27f23e641d · Nota
• https://github.com/torvalds/linux/commit/338f977f4eb441e69bb9a46eaa0ac715c931a67f · Nota
• https://github.com/torvalds/linux/commit/137f7df8cead00688524c82360930845396b8a21 · Nota
• https://github.com/torvalds/linux/commit/1d147bfa64293b2723c4fec50922168658e613ba · Nota