PT-2014-3535 · Linux+2 · Linux Kernel+2

Louis Rilling

+1

·

Publicado

2014-09-09

·

Atualizado

2023-02-13

·

CVE-2014-0205

CVSS v2.0

6.9

Média

VetorAV:L/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.37
Description The issue is related to the futex wait function in kernel/futex.c, which does not properly maintain a certain reference count during requeue operations. This can be exploited by local users to cause a denial of service, resulting in a use-after-free and system crash, or possibly gain privileges via a crafted application that triggers a zero count.
Recommendations For Linux kernel versions prior to 2.6.37, update to version 2.6.37 or later to resolve the issue.

Exploit

Correção

DoS

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CESA-2014_1167
CVE-2014-0205
RHSA-2014:1167
RHSA-2014:1365
RHSA-2014:1763
RHSA-2014_1167
USN-1041-1

Produtos afetados

Centos
Linux Kernel
Red Hat