PT-2014-8619 · Linux+5 · Linux Kernel+5

Al Viro · Publicado 2014-11-10 · Atualizado 2020-08-13 · CVE-2014-8559

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.17.3

Description The issue is related to the d walk function in fs/dcache.c, which does not properly maintain the semantics of rename lock. This allows local users to cause a denial of service, resulting in a deadlock and system hang, via a crafted application.

Recommendations For Linux kernel versions prior to 3.17.3, update to version 3.17.3 or later to resolve the issue.

Exploit

Correção

DoS

Resource Exhaustion

Enumeração de Fraquezas

CWE-400

Identificadores relacionados

ALT-PU-2014-2361

ALT-PU-2015-1794

CESA-2015_1978

CVE-2014-8559

DSA-3170-1

OPENSUSE-SU-2015_0713-1

OPENSUSE-SU-2015_0714-1

RHSA-2015:1976

RHSA-2015:1977

RHSA-2015:1978

RHSA-2015_1977

RHSA-2015_1978

SUSE-RU-2015:0621-1

SUSE-SU-2015:0481-1

SUSE-SU-2015:0529-1

SUSE-SU-2015:0581-1

SUSE-SU-2015:0736-1

SUSE-SU-2015:1174-1

SUSE-SU-2015:1376-1

USN-2492-1

USN-2493-1

USN-2515-1

USN-2516-1

USN-2516-2

USN-2516-3

USN-2517-1

USN-2518-1

Produtos afetados

Alt Linux

Centos

Linux Kernel

Red Hat

Suse

Ubuntu

Referências · 596

• 🔥 https://github.com/retme7/CVE-2014-4322_poc · Exploit
• 🔥 https://github.com/panyu6325/CVE-2015-1805 · Exploit
• 🔥 https://github.com/laginimaineb/cve-2014-4322 · Exploit
• 🔥 https://github.com/marcograss/cve-2014-4323 · Exploit
• 🔥 https://github.com/FloatingGuy/cve-2015-1805 · Exploit
• 🔥 https://github.com/ireshchaminda1/Android-Privilege-Escalation-Remote-Access-Vulnerability-CVE-2015-1805 · Exploit
• 🔥 http://debian.org/security/2015/dsa-3170 · Exploit
• 🔥 https://lkml.org/lkml/2014/10/25/171 · Exploit
• 🔥 https://lkml.org/lkml/2014/10/26/116 · Exploit
• https://github.com/torvalds/linux/commit/e40607cbe270a9e8360907cb1e62ddf0736e4864 · Nota
• https://github.com/torvalds/linux/commit/086ba77a6db00ed858ff07451bedee197df868c9 · Nota
• https://github.com/torvalds/linux/commit/410dd3cf4c9b36f27ed4542ee18b1af5e68645a4 · Nota
• https://github.com/torvalds/linux/commit/c03aa9f6e1f938618e6db2e23afef0574efeeb65 · Nota
• https://github.com/torvalds/linux/commit/4e7c22d447bb6d7e37bfe39ff658486ae78e8d77 · Nota
• https://github.com/torvalds/linux/commit/c54def7bd64d7c0b6993336abcffb8444795bf38 · Nota