PT-2014-4783 · Linux+4 · Linux Kernel+4

Publicado 2014-03-24 · Atualizado 2019-05-10 · CVE-2014-2568

Positive Technologies (AI Summary)

CVSS v2.0

2.9

Baixa

Vetor base

AV:A/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.13.6

Description The issue is related to a use-after-free vulnerability in the Linux kernel, specifically in the nfqnl zcopy function, which allows attackers to obtain sensitive information from kernel memory. This is possible due to the absence of a certain orphaning operation. The affected code was later moved to the skb zerocopy function.

Recommendations For Linux kernel versions prior to 3.13.6, update to version 3.13.6 or later to resolve the issue. As a temporary workaround, consider restricting access to the nfqnl zcopy function until a patch is available.

Exploit

Correção

Use After Free

Enumeração de Fraquezas

CWE-416

Identificadores relacionados

ALT-PU-2014-1355

ALT-PU-2014-1820

ALT-PU-2014-2064

CVE-2014-2568

OPENSUSE-SU-2016_0301-1

RHSA-2014:0786

RHSA-2014_0786

USN-2239-1

USN-2240-1

USN-2241-1

USN-2260-1

Produtos afetados

Alt Linux

Linux Kernel

Red Hat

Suse

Ubuntu

Referências · 501

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/android/local/futex_requeue.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/recvmmsg_priv_esc.rb · Exploit
• 🔥 https://github.com/saelo/cve-2014-0038 · Exploit
• 🔥 https://github.com/fi01/CVE-2015-3636 · Exploit
• 🔥 https://github.com/timwr/CVE-2014-3153 · Exploit
• 🔥 https://github.com/android-rooting-tools/libpingpong_exploit · Exploit
• 🔥 https://github.com/android-rooting-tools/libfutex_exploit · Exploit
• 🔥 https://github.com/nardholio/cve-2016-0728 · Exploit
• 🔥 https://github.com/a7vinx/CVE-2015-3636 · Exploit
• 🔥 https://github.com/askk/libping_unhash_exploit_POC · Exploit
• 🔥 https://github.com/lieanu/CVE-2014-3153 · Exploit
• 🔥 https://github.com/Kagami/docker_cve-2015-2925 · Exploit
• 🔥 https://github.com/elongl/CVE-2014-3153 · Exploit
• 🔥 https://github.com/bittorrent3389/cve-2016-0728 · Exploit
• 🔥 https://github.com/zerodavinci/CVE-2014-3153-exploit · Exploit