PT-2014-8550 · Linux+1 · Linux Kernel+1

Publicado 2014-11-10 · Atualizado 2016-11-28 · CVE-2014-8480

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Média

Vetor base

AV:L/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.18-rc2

Description The issue is related to the instruction decoder in the KVM subsystem of the Linux kernel. It lacks intended decoder-table flags for certain RIP-relative instructions, allowing guest OS users to cause a denial of service. This can be achieved by a crafted application, resulting in a NULL pointer dereference and a host OS crash.

Recommendations For versions prior to 3.18-rc2, update to version 3.18-rc2 or later to resolve the issue.

Exploit

Correção

DoS

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

ALT-PU-2014-2452

ALT-PU-2015-1794

CVE-2014-8480

Produtos afetados

Alt Linux

Linux Kernel

Referências · 361

• 🔥 https://github.com/torvalds/linux/commit/3f6f1480d86bf9fc16c160d803ab1d006e3058d5 · Exploit
• 🔥 https://github.com/retme7/CVE-2014-4322_poc · Exploit
• 🔥 https://github.com/panyu6325/CVE-2015-1805 · Exploit
• 🔥 https://github.com/laginimaineb/cve-2014-4322 · Exploit
• 🔥 https://github.com/marcograss/cve-2014-4323 · Exploit
• 🔥 https://github.com/FloatingGuy/cve-2015-1805 · Exploit
• 🔥 https://github.com/ireshchaminda1/Android-Privilege-Escalation-Remote-Access-Vulnerability-CVE-2015-1805 · Exploit
• 🔥 http://openwall.com/lists/oss-security/2014/10/23/7 · Exploit
• 🔥 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=3f6f1480d86bf9fc16c160d803ab1d006e3058d5 · Exploit
• https://github.com/torvalds/linux/commit/e40607cbe270a9e8360907cb1e62ddf0736e4864 · Nota
• https://github.com/torvalds/linux/commit/c03aa9f6e1f938618e6db2e23afef0574efeeb65 · Nota
• https://github.com/torvalds/linux/commit/410dd3cf4c9b36f27ed4542ee18b1af5e68645a4 · Nota
• https://github.com/torvalds/linux/commit/4e7c22d447bb6d7e37bfe39ff658486ae78e8d77 · Nota
• https://github.com/torvalds/linux/commit/3d32e4dbe71374a6780eaf51d719d76f9a9bf22f · Nota
• https://github.com/torvalds/linux/commit/295dc39d941dc2ae53d5c170365af4c9d5c16212 · Nota