PT-2014-1009 · Linux+1 · Linux Kernel+1

CVE-2014-0049 · Publicado 2014-03-04 · Atualizado 2023-02-13

Positive Technologies (AI Summary)

CVSS v2.0

7.4

Alta

Vetor base

AV:A/AC:M/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.13.6

Description The issue is related to a buffer overflow in the complete emulated mmio function, which allows guest OS users to execute arbitrary code on the host OS. This is achieved by leveraging a loop that triggers an invalid memory copy affecting certain cancel work item data.

Recommendations For Linux kernel versions prior to 3.13.6, update to version 3.13.6 or later to resolve the issue. As a temporary workaround, consider restricting access to the complete emulated mmio function to minimize the risk of exploitation.

Exploit

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

CWE-120

Identificadores relacionados

ALT-PU-2014-1258

ALT-PU-2014-1272

ALT-PU-2014-1547

ALT-PU-2014-2064

BDU:2014-00055

CVE-2014-0049

MGASA-2014-0206

MGASA-2014-0207

MGASA-2014-0208

MGASA-2014-0228

MGASA-2014-0229

MGASA-2014-0234

MGASA-2014-0235

MGASA-2014-0236

MGASA-2014-0237

MGASA-2014-0238

USN-2175-1

USN-2176-1

USN-2177-1

USN-2178-1

USN-2179-1

USN-2180-1

USN-2181-1

Produtos afetados

Alt Linux

Linux Kernel

Referências · 84

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/recvmmsg_priv_esc.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/android/local/futex_requeue.rb · Exploit
• 🔥 https://github.com/saelo/cve-2014-0038 · Exploit
• 🔥 https://github.com/timwr/CVE-2014-3153 · Exploit
• 🔥 https://github.com/android-rooting-tools/libfutex_exploit · Exploit
• 🔥 https://github.com/lieanu/CVE-2014-3153 · Exploit
• 🔥 https://github.com/elongl/CVE-2014-3153 · Exploit
• 🔥 https://github.com/zerodavinci/CVE-2014-3153-exploit · Exploit
• 🔥 https://github.com/tempbottle/CVE-2014-0196 · Exploit
• https://github.com/torvalds/linux/commit/a08d3b3b99efd509133946056531cdf8f3a0c09b · Correção
• https://kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.12.17 · Nota
• https://ubuntu.com/security/CVE-2014-0049 · Aviso do Fabricante
• https://advisories.mageia.org/MGASA-2014-0228.html · Nota de Segurança
• https://ubuntu.com/security/notices/USN-2180-1 · Aviso do Fabricante
• https://ubuntu.com/security/notices/USN-2177-1 · Aviso do Fabricante