PT-2014-8349 · Linux+5 · Linux Kernel+5

Publicado 2014-10-13 · Atualizado 2020-08-14 · CVE-2014-7975

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions through 3.17

Description The issue allows local users to cause a denial of service, specifically a loss of writability, by manipulating certain system calls and flags. This is due to the do umount function not requiring the CAP SYS ADMIN capability for specific do remount sb calls that change the root filesystem to read-only.

Recommendations For Linux kernel versions through 3.17, as a temporary workaround, consider restricting the use of the do umount function until a patch is available. Additionally, limiting the ability to make certain unshare system calls and clearing the / MNT LOCKED flag can help minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

ALT-PU-2014-2297

ALT-PU-2015-1794

CESA-2017_1842

CVE-2014-7975

MGASA-2014-0451

MGASA-2014-0452

MGASA-2014-0453

MGASA-2014-0454

MGASA-2014-0455

MGASA-2014-0456

MGASA-2014-0459

MGASA-2014-0479

OPENSUSE-SU-2014_1677-1

RHSA-2017:1842

RHSA-2017:2077

RHSA-2017_1842

RHSA-2017_2077

USN-2415-1

USN-2416-1

USN-2417-1

USN-2418-1

USN-2419-1

USN-2420-1

USN-2421-1

Produtos afetados

Alt Linux

Centos

Linux Kernel

Red Hat

Suse

Ubuntu

Referências · 705

• 🔥 https://github.com/qazbnm456/awesome-cve-poc/blob/master/Stack-Clash.md · Exploit
• 🔥 https://github.com/hardenedlinux/offensive_poc/tree/master/CVE-2017-8890 · Exploit
• 🔥 https://github.com/retme7/CVE-2014-4322_poc · Exploit
• 🔥 https://github.com/panyu6325/CVE-2015-1805 · Exploit
• 🔥 https://github.com/thinkycx/CVE-2017-8890 · Exploit
• 🔥 https://github.com/laginimaineb/cve-2014-4322 · Exploit
• 🔥 https://github.com/beraphin/CVE-2017-8890 · Exploit
• 🔥 https://github.com/marcograss/cve-2014-4323 · Exploit
• 🔥 https://github.com/RicterZ/PIE-Stack-Clash-CVE-2017-1000253 · Exploit
• 🔥 https://github.com/RKX1209/CVE-2014-9322 · Exploit
• 🔥 https://github.com/FloatingGuy/cve-2015-1805 · Exploit
• 🔥 https://github.com/ireshchaminda1/Android-Privilege-Escalation-Remote-Access-Vulnerability-CVE-2015-1805 · Exploit
• https://github.com/torvalds/linux/commit/e40607cbe270a9e8360907cb1e62ddf0736e4864 · Nota
• https://github.com/torvalds/linux/commit/086ba77a6db00ed858ff07451bedee197df868c9 · Nota
• https://github.com/torvalds/linux/commit/410dd3cf4c9b36f27ed4542ee18b1af5e68645a4 · Nota