PT-2014-1824 · Linux+5 · Linux Kernel+5

Publicado 2014-11-10 · Atualizado 2023-02-13 · CVE-2014-3687

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Red Hat Enterprise Linux kernel-bootwrapper-2.6.32 versions 2.6.32 Red Hat Enterprise Linux kernel-kdump-2.6.32 versions 2.6.32 Red Hat Enterprise Linux kernel-kdump-devel-2.6.32 versions 2.6.32 Red Hat Enterprise Linux kernel-debuginfo-common-s390x-2.6.32 versions 2.6.32 Red Hat Enterprise Linux kernel-kdump-debuginfo-2.6.32 versions 2.6.32 Linux kernel versions prior to 3.17.2

Description The issue affects the Linux kernel and Red Hat Enterprise Linux, allowing remote attackers to cause a denial of service or disrupt the confidentiality, integrity, and availability of protected information. The sctp assoc lookup asconf ack function in net/sctp/associola.c is specifically vulnerable to duplicate ASCONF chunks that trigger an incorrect uncork within the side-effect interpreter, leading to a panic.

Recommendations For Red Hat Enterprise Linux kernel-bootwrapper-2.6.32 version 2.6.32, update to a newer version that contains a fix for this issue. For Red Hat Enterprise Linux kernel-kdump-2.6.32 version 2.6.32, update to a newer version that contains a fix for this issue. For Red Hat Enterprise Linux kernel-kdump-devel-2.6.32 version 2.6.32, update to a newer version that contains a fix for this issue. For Red Hat Enterprise Linux kernel-debuginfo-common-s390x-2.6.32 version 2.6.32, update to a newer version that contains a fix for this issue. For Red Hat Enterprise Linux kernel-kdump-debuginfo-2.6.32 version 2.6.32, update to a newer version that contains a fix for this issue. For Linux kernel versions prior to 3.17.2, update to version 3.17.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the sctp assoc lookup asconf ack function until a patch is available.

Exploit

Correção

DoS

Resource Exhaustion

Enumeração de Fraquezas

CWE-400

CWE-399

Identificadores relacionados

ALT-PU-2014-2380

ALT-PU-2014-2381

BDU:2015-06243

BDU:2015-06250

BDU:2015-06263

BDU:2015-06264

BDU:2015-06265

CESA-2014_1971

CESA-2014_1997

CVE-2014-3687

DLA-118-1

DSA-3060-1

OPENSUSE-SU-2014_1677-1

OPENSUSE-SU-2014_1678-1

RHSA-2014:1971

RHSA-2014:1997

RHSA-2014_1971

RHSA-2014_1997

RHSA-2015:0043

RHSA-2015:0062

RHSA-2015:0115

SUSE-RU-2015:0621-1

SUSE-SU-2015:0481-1

SUSE-SU-2015:0529-1

SUSE-SU-2015:0581-1

SUSE-SU-2015:0652-1

SUSE-SU-2015:0736-1

SUSE-SU-2015:1174-1

SUSE-SU-2015:1376-1

SUSE-SU-2015:1489-1

SUSE-SU-2015_0178-1

USN-2417-1

USN-2418-1

USN-2441-1

USN-2442-1

USN-2445-1

USN-2446-1

USN-2447-1

USN-2447-2

USN-2448-1

Produtos afetados

Alt Linux

Centos

Linux Kernel

Red Hat

Suse

Ubuntu

Referências · 159

• 🔥 https://github.com/torvalds/linux/commit/b69040d8e39f20d5215a03502a8e8b4c6ab78395 · Exploit
• 🔥 https://github.com/RKX1209/CVE-2014-9322 · Exploit
• 🔥 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=b69040d8e39f20d5215a03502a8e8b4c6ab78395 · Exploit
• https://suse.com/support/update/announcement/2015/suse-su-20151489-1 · Nota
• https://suse.com/security/cve/CVE-2015-3331 · Nota
• https://bugzilla.suse.com/895805 · Nota
• https://cve.org/CVERecord?id=CVE-2014-3687 · Nota de Segurança
• https://bugzilla.suse.com/915454 · Nota
• https://ubuntu.com/security/CVE-2014-3673 · Aviso do Fabricante
• https://ubuntu.com/security/notices/USN-2418-1 · Aviso do Fabricante
• https://bugzilla.suse.com/939260 · Nota
• https://bugzilla.suse.com/939240 · Nota
• https://bugzilla.suse.com/939044 · Nota
• https://bdu.fstec.ru/vul/2015-06263 · Nota de Segurança
• https://suse.com/security/cve/CVE-2014-9584 · Nota