PT-2014-8423 · Linux+5 · Linux Kernel+5

Publicado

2014-12-17

·

Atualizado

2024-06-15

·

CVE-2014-8133

CVSS v2.0

2.1

Baixa

VetorAV:L/AC:L/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.18.1
Description The issue allows local users to bypass the espfix protection mechanism, making it easier to bypass the ASLR protection mechanism. This can be achieved via a crafted application that makes a set thread area system call and later reads a 16-bit value.
Recommendations For Linux kernel versions prior to 3.18.1, update to version 3.18.1 or later to resolve the issue.

Exploit

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

ALT-PU-2015-1018
ALT-PU-2015-1794
CESA-2015_1272
CVE-2014-8133
DLA-155-1
DSA-3128-1
MGASA-2015-0006
MGASA-2015-0075
MGASA-2015-0076
MGASA-2015-0077
MGASA-2015-0078
OPENSUSE-SU-2014_1669-1
OPENSUSE-SU-2014_1677-1
OPENSUSE-SU-2014_1678-1
OPENSUSE-SU-2016_0301-1
OPENSUSE-SU-2024:10128-1
RHSA-2015:1272
RHSA-2015_1272
SUSE-RU-2015:0621-1
SUSE-SU-2014_1698-1
SUSE-SU-2015:0481-1
SUSE-SU-2015:0581-1
SUSE-SU-2015:0652-1
SUSE-SU-2015:0736-1
SUSE-SU-2015:1174-1
SUSE-SU-2015:1376-1
USN-2490-1
USN-2491-1
USN-2492-1
USN-2493-1
USN-2515-1
USN-2516-1
USN-2516-2
USN-2516-3
USN-2517-1
USN-2518-1

Produtos afetados

Alt Linux
Centos
Linux Kernel
Red Hat
Suse
Ubuntu