PT-2014-8424 · Linux+5 · Linux Kernel+5

Publicado 2014-12-08 · Atualizado 2023-02-13 · CVE-2014-8134

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Baixa

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.19

Description The issue makes it easier for guest OS users to bypass the ASLR protection mechanism. This is achieved via a crafted application that reads a 16-bit value, exploiting the improper paravirt enabled setting for KVM guest kernels in the paravirt ops setup function.

Recommendations For Linux kernel versions prior to 3.19, update to version 3.19 or later to resolve the issue.

Exploit

Correção

Identificadores relacionados

ALT-PU-2014-2452

ALT-PU-2015-1794

CESA-2016_0855

CVE-2014-8134

DLA-155-1

MGASA-2015-0006

MGASA-2015-0075

MGASA-2015-0076

MGASA-2015-0077

MGASA-2015-0078

OPENSUSE-SU-2015_0713-1

OPENSUSE-SU-2015_0714-1

RHSA-2016:0855

RHSA-2016_0855

SUSE-RU-2015:0621-1

SUSE-SU-2015:0481-1

SUSE-SU-2015:0581-1

SUSE-SU-2015:0736-1

SUSE-SU-2015:1174-1

SUSE-SU-2015:1376-1

USN-2441-1

USN-2442-1

USN-2443-1

USN-2444-1

USN-2445-1

USN-2446-1

USN-2447-1

USN-2447-2

USN-2448-1

USN-2464-1

Produtos afetados

Alt Linux

Centos

Linux Kernel

Red Hat

Suse

Ubuntu

Referências · 650

• 🔥 https://github.com/retme7/CVE-2014-4322_poc · Exploit
• 🔥 https://github.com/panyu6325/CVE-2015-1805 · Exploit
• 🔥 https://github.com/laginimaineb/cve-2014-4322 · Exploit
• 🔥 https://github.com/marcograss/cve-2014-4323 · Exploit
• 🔥 https://github.com/RKX1209/CVE-2014-9322 · Exploit
• 🔥 https://github.com/FloatingGuy/cve-2015-1805 · Exploit
• 🔥 https://github.com/ireshchaminda1/Android-Privilege-Escalation-Remote-Access-Vulnerability-CVE-2015-1805 · Exploit
• 🔥 http://spinics.net/lists/kvm/msg111458.html · Exploit
• https://github.com/torvalds/linux/commit/e40607cbe270a9e8360907cb1e62ddf0736e4864 · Nota
• https://github.com/torvalds/linux/commit/086ba77a6db00ed858ff07451bedee197df868c9 · Nota
• https://github.com/torvalds/linux/commit/410dd3cf4c9b36f27ed4542ee18b1af5e68645a4 · Nota
• https://github.com/torvalds/linux/commit/c03aa9f6e1f938618e6db2e23afef0574efeeb65 · Nota
• https://github.com/torvalds/linux/commit/4e7c22d447bb6d7e37bfe39ff658486ae78e8d77 · Nota
• https://github.com/torvalds/linux/commit/c54def7bd64d7c0b6993336abcffb8444795bf38 · Nota
• https://github.com/torvalds/linux/commit/26b87c7881006311828bb0ab271a551a62dcceb4 · Nota