PT-2014-4443 · Linux+3 · Linux Kernel+3

Scott Mayhew + 1 · Publicado 2014-02-16 · Atualizado 2023-02-13 · CVE-2014-2038

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.13.3

Description The issue allows local users to obtain sensitive information from kernel memory under certain circumstances. This is due to the nfs can extend write function relying on a write delegation to extend a write operation without proper verification. The exploitation involves writing to a file in an NFS filesystem and then reading the same file.

Recommendations For Linux kernel versions prior to 3.13.3, update to version 3.13.3 or later to resolve the issue.

Exploit

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

ALT-PU-2014-1198

ALT-PU-2014-2064

CESA-2014_0328

CVE-2014-2038

MGASA-2014-0103

RHSA-2014:0328

RHSA-2014_0328

USN-2137-1

USN-2140-1

Produtos afetados

Alt Linux

Centos

Linux Kernel

Red Hat

Referências · 329

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/android/local/futex_requeue.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/recvmmsg_priv_esc.rb · Exploit
• 🔥 https://github.com/saelo/cve-2014-0038 · Exploit
• 🔥 https://github.com/timwr/CVE-2014-3153 · Exploit
• 🔥 https://github.com/android-rooting-tools/libfutex_exploit · Exploit
• 🔥 https://github.com/lieanu/CVE-2014-3153 · Exploit
• 🔥 https://github.com/elongl/CVE-2014-3153 · Exploit
• 🔥 https://github.com/zerodavinci/CVE-2014-3153-exploit · Exploit
• 🔥 https://github.com/tempbottle/CVE-2014-0196 · Exploit
• https://github.com/torvalds/linux/commit/05ab8f2647e4221cbdb3856dd7d32bd5407316b3 · Nota
• https://github.com/torvalds/linux/commit/4291086b1f081b869c6d79e5b7441633dc3ace00 · Nota
• https://github.com/torvalds/linux/commit/c88547a8119e3b581318ab65e9b72f27f23e641d · Nota
• https://github.com/torvalds/linux/commit/263b4509ec4d47e0da3e753f85a39ea12d1eff24 · Correção
• https://github.com/torvalds/linux/commit/338f977f4eb441e69bb9a46eaa0ac715c931a67f · Nota
• https://github.com/torvalds/linux/commit/137f7df8cead00688524c82360930845396b8a21 · Nota