PT-2014-5708 · Linux+1 · Linux Kernel+1

Publicado 2014-06-18 · Atualizado 2018-12-18 · CVE-2014-4157

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.14.8

Description The issue allows local users to bypass intended PR SET SECCOMP restrictions by executing a crafted application without invoking a trace or audit subsystem, due to the lack of TIF SECCOMP checks on the fast system-call path in the Linux kernel on the MIPS platform.

Recommendations For versions prior to 3.14.8, update to version 3.14.8 or later to resolve the issue.

Exploit

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

ALT-PU-2014-1795

ALT-PU-2014-2064

CVE-2014-4157

DLA-103-1

Produtos afetados

Alt Linux

Linux Kernel

Referências · 291

• 🔥 https://github.com/torvalds/linux/commit/137f7df8cead00688524c82360930845396b8a21 · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/android/local/futex_requeue.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/recvmmsg_priv_esc.rb · Exploit
• 🔥 https://github.com/saelo/cve-2014-0038 · Exploit
• 🔥 https://github.com/timwr/CVE-2014-3153 · Exploit
• 🔥 https://github.com/android-rooting-tools/libfutex_exploit · Exploit
• 🔥 https://github.com/lieanu/CVE-2014-3153 · Exploit
• 🔥 https://github.com/elongl/CVE-2014-3153 · Exploit
• 🔥 https://github.com/zerodavinci/CVE-2014-3153-exploit · Exploit
• 🔥 https://github.com/tempbottle/CVE-2014-0196 · Exploit
• 🔥 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=137f7df8cead00688524c82360930845396b8a21 · Exploit
• https://github.com/torvalds/linux/commit/05ab8f2647e4221cbdb3856dd7d32bd5407316b3 · Nota
• https://github.com/torvalds/linux/commit/4291086b1f081b869c6d79e5b7441633dc3ace00 · Nota
• https://github.com/torvalds/linux/commit/c88547a8119e3b581318ab65e9b72f27f23e641d · Nota
• https://github.com/torvalds/linux/commit/338f977f4eb441e69bb9a46eaa0ac715c931a67f · Nota