PT-2014-7880 · Linux+2 · Linux Kernel+2

Hannes Frederic Sowa · Publicado 2014-05-08 · Atualizado 2020-08-06 · CVE-2014-7283

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Média

Vetor base

AV:L/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.14.2

Description The issue is related to the xfs da3 fixhashpath function in the xfs implementation, which does not properly compare btree hash values. This allows local users to cause a denial of service, resulting in filesystem corruption, and potentially leading to an OOPS or panic, via operations on directories that have hash collisions. An example of such an operation is an rmdir operation.

Recommendations For Linux kernel versions prior to 3.14.2, update to version 3.14.2 or later to resolve the issue.

Exploit

Correção

DoS

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

ALT-PU-2014-1602

ALT-PU-2014-2064

CVE-2014-7283

MGASA-2014-0451

MGASA-2014-0452

MGASA-2014-0455

RHSA-2014:1943

USN-2226-1

USN-2239-1

USN-2260-1

USN-2394-1

Produtos afetados

Alt Linux

Linux Kernel

Ubuntu

Referências · 72

• 🔥 https://github.com/torvalds/linux/commit/c88547a8119e3b581318ab65e9b72f27f23e641d · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/recvmmsg_priv_esc.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/android/local/futex_requeue.rb · Exploit
• 🔥 https://github.com/saelo/cve-2014-0038 · Exploit
• 🔥 https://github.com/timwr/CVE-2014-3153 · Exploit
• 🔥 https://github.com/android-rooting-tools/libfutex_exploit · Exploit
• 🔥 https://github.com/lieanu/CVE-2014-3153 · Exploit
• 🔥 https://github.com/elongl/CVE-2014-3153 · Exploit
• 🔥 https://github.com/zerodavinci/CVE-2014-3153-exploit · Exploit
• 🔥 https://github.com/tempbottle/CVE-2014-0196 · Exploit
• 🔥 https://bugzilla.redhat.com/show_bug.cgi?id=1148777 · Exploit
• 🔥 http://marc.info/?l=linux-xfs&m=139590613002926&w=2 · Exploit
• 🔥 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=c88547a8119e3b581318ab65e9b72f27f23e641d · Exploit
• https://advisories.mageia.org/MGASA-2014-0451.html · Nota de Segurança
• https://kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.9 · Nota