PT-2014-2024 · Busybox+2 · Busybox+2
Mathias Krause
·
Publicado
2014-11-19
·
Atualizado
2024-06-15
·
CVE-2014-9645
CVSS v3.1
5.5
Média
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
BusyBox versions prior to 1.23.0
Description
The issue is related to the
add probe function in modutils/modprobe.c and is caused by insufficient input validation, allowing local users to bypass restrictions on loading kernel modules by using a / character in a module name. This can be demonstrated through commands such as "ifconfig /usbserial up" or "mount -t /snd pcm none /". The vulnerability affects the integrity of data.Recommendations
For versions prior to 1.23.0, update to version 1.23.0 or later to resolve the issue. As a temporary workaround, consider restricting the use of the
add probe function until a patch is available. Avoid using the / character in module names to minimize the risk of exploitation.Correção
RCE
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Busybox
Suse
Ubuntu