PT-2014-6346 · Linux+3 · Linux Kernel+3

Publicado 2014-08-13 · Atualizado 2020-08-14 · CVE-2014-5207

Positive Technologies (AI Summary)

CVSS v2.0

6.2

Média

Vetor base

AV:L/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions through 3.16.1

Description The issue allows local users to gain privileges, interfere with backups and auditing on systems that had atime enabled, or cause a denial of service via a "mount -o remount" command within a user namespace. This is due to the improper restriction of clearing MNT NODEV, MNT NOSUID, and MNT NOEXEC and changing MNT ATIME MASK during a remount of a bind mount.

Recommendations For Linux kernel versions through 3.16.1, update to a version that contains a fix for this issue to prevent local users from gaining privileges or causing a denial of service.

Exploit

Correção

DoS

Improper Privilege Management

Enumeração de Fraquezas

CWE-269

Identificadores relacionados

ALT-PU-2014-2023

ALT-PU-2014-2024

ALT-PU-2014-2025

ALT-PU-2014-2106

ALT-PU-2015-1794

CVE-2014-5207

OPENSUSE-SU-2014_1677-1

USN-2317-1

USN-2318-1

Produtos afetados

Alt Linux

Linux Kernel

Suse

Ubuntu

Referências · 32

• 🔥 https://github.com/retme7/CVE-2014-4322_poc · Exploit
• 🔥 https://github.com/panyu6325/CVE-2015-1805 · Exploit
• 🔥 https://github.com/laginimaineb/cve-2014-4322 · Exploit
• 🔥 https://github.com/marcograss/cve-2014-4323 · Exploit
• 🔥 https://github.com/RKX1209/CVE-2014-9322 · Exploit
• 🔥 https://github.com/FloatingGuy/cve-2015-1805 · Exploit
• 🔥 https://github.com/ireshchaminda1/Android-Privilege-Escalation-Remote-Access-Vulnerability-CVE-2015-1805 · Exploit
• 🔥 http://packetstormsecurity.com/files/128595/Linux-Kernel-3.16.1-FUSE-Privilege-Escalation.html · Exploit
• 🔥 http://exploit-db.com/exploits/34923 · Exploit
• 🔥 https://exploit-db.com/exploits/34923 · Exploit
• https://github.com/torvalds/linux/commit/9566d6742852c527bf5af38af5cbb878dad75705 · Correção
• https://ubuntu.com/security/CVE-2014-5207 · Aviso do Fabricante
• http://seclists.org/oss-sec/2014/q3/352 · Nota
• https://osv.dev/vulnerability/USN-2318-1 · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2014/08/13/4 · Nota