PT-2014-5376 · Linux+3 · Linux Kernel+3

Martin Schwidefsky · Publicado 2014-08-01 · Atualizado 2023-10-03 · CVE-2014-3534

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.15.8

Description The issue allows local users to obtain read and write access to kernel memory locations, and consequently gain privileges, via a crafted application that makes a ptrace system call. This is due to the Linux kernel not properly restricting address-space control operations in PTRACE POKEUSR AREA requests on the s390 platform.

Recommendations For Linux kernel versions prior to 3.15.8, update to version 3.15.8 or later to resolve the issue. As a temporary workaround, consider restricting the use of ptrace system calls to minimize the risk of exploitation.

Exploit

Correção

Improper Privilege Management

Enumeração de Fraquezas

CWE-269

Identificadores relacionados

ALT-PU-2014-1970

ALT-PU-2015-1794

CESA-2014_1023

CVE-2014-3534

DSA-2992-1

RHSA-2014:1023

RHSA-2014_1023

Produtos afetados

Alt Linux

Centos

Linux Kernel

Red Hat

Referências · 27

• 🔥 https://github.com/retme7/CVE-2014-4322_poc · Exploit
• 🔥 https://github.com/panyu6325/CVE-2015-1805 · Exploit
• 🔥 https://github.com/laginimaineb/cve-2014-4322 · Exploit
• 🔥 https://github.com/marcograss/cve-2014-4323 · Exploit
• 🔥 https://github.com/FloatingGuy/cve-2015-1805 · Exploit
• 🔥 https://github.com/ireshchaminda1/Android-Privilege-Escalation-Remote-Access-Vulnerability-CVE-2015-1805 · Exploit
• https://github.com/torvalds/linux/commit/dab6cf55f81a6e16b8147aed9a843e1691dcd318 · Correção
• http://debian.org/security/2014/dsa-2992 · Aviso do Fabricante
• http://securitytracker.com/id/1030683 · Nota
• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=dab6cf55f81a6e16b8147aed9a843e1691dcd318 · Nota
• https://osv.dev/vulnerability/UBUNTU-CVE-2014-3534 · Aviso do Fabricante
• http://secunia.com/advisories/59790 · Nota
• http://securityfocus.com/bid/68940 · Nota
• https://bugzilla.redhat.com/show_bug.cgi?id=1114089 · Nota
• https://linux.oracle.com/errata/ELSA-2014-1023.html · Aviso do Fabricante