PT-2014-5413 · Linux+5 · Linux Kernel+5

Jack Morgenstein · Publicado 2014-08-31 · Atualizado 2023-02-13 · CVE-2014-3601

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:A/AC:H/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.16.1

Description The issue arises from a miscalculation in the number of pages during the handling of a mapping failure in the kvm iommu map pages function. This allows guest OS users to cause a denial of service, either through host OS memory corruption by triggering a large gfn value or through host OS memory consumption by triggering a small gfn value, leading to permanently pinned pages.

Recommendations For Linux kernel versions prior to 3.16.1, update to version 3.16.1 or later to resolve the issue.

Exploit

Correção

DoS

Enumeração de Fraquezas

CWE-189

Identificadores relacionados

ALT-PU-2014-2106

ALT-PU-2015-1794

CESA-2014_1392

CVE-2014-3601

MGASA-2014-0392

MGASA-2014-0451

MGASA-2014-0452

MGASA-2014-0453

MGASA-2014-0454

MGASA-2014-0455

MGASA-2014-0456

MGASA-2014-0459

MGASA-2014-0479

MGASA-2015-0075

MGASA-2015-0076

MGASA-2015-0077

MGASA-2015-0078

RHSA-2014:1392

RHSA-2014_1392

SUSE-RU-2015:0621-1

SUSE-SU-2015:0481-1

SUSE-SU-2015:0581-1

SUSE-SU-2015:0736-1

SUSE-SU-2015:1174-1

SUSE-SU-2015:1376-1

USN-2356-1

USN-2357-1

USN-2358-1

USN-2359-1

Produtos afetados

Alt Linux

Centos

Linux Kernel

Red Hat

Suse

Ubuntu

Referências · 124

• 🔥 https://github.com/torvalds/linux/commit/350b8bdd689cd2ab2c67c8a86a0be86cfa0751a7 · Exploit
• 🔥 https://github.com/retme7/CVE-2014-4322_poc · Exploit
• 🔥 https://github.com/panyu6325/CVE-2015-1805 · Exploit
• 🔥 https://github.com/laginimaineb/cve-2014-4322 · Exploit
• 🔥 https://github.com/marcograss/cve-2014-4323 · Exploit
• 🔥 https://github.com/hiikezoe/libfb_mem_exploit · Exploit
• 🔥 https://github.com/FloatingGuy/cve-2015-1805 · Exploit
• 🔥 https://github.com/ireshchaminda1/Android-Privilege-Escalation-Remote-Access-Vulnerability-CVE-2015-1805 · Exploit
• 🔥 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=350b8bdd689cd2ab2c67c8a86a0be86cfa0751a7 · Exploit
• https://kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.10.54 · Nota
• https://advisories.mageia.org/MGASA-2014-0392.html · Nota de Segurança
• https://kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.28 · Nota
• https://advisories.mageia.org/MGASA-2014-0451.html · Nota de Segurança
• https://advisories.mageia.org/MGASA-2015-0076.html · Nota de Segurança
• https://osv.dev/vulnerability/MGASA-2015-0077 · Aviso do Fabricante