PT-2015-3793 · Nvidia · Nvidia Tegra Linux Kernel

Publicado 2015-02-06 · Atualizado 2016-09-20 · CVE-2014-5332

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Média

Vetor base

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions NVIDIA Tegra Linux Kernel version 3.10

Description A race condition exists in the NVMap component of the NVIDIA Tegra Linux Kernel, allowing local users to gain privileges. This is achieved through a crafted NVMAP IOC CREATE IOCTL call, which triggers a use-after-free error. The issue can be exploited to escape the Chrome sandbox.

Recommendations For NVIDIA Tegra Linux Kernel version 3.10, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Race Condition

Enumeração de Fraquezas

CWE-362

Identificadores relacionados

CVE-2014-5332

Produtos afetados

Nvidia Tegra Linux Kernel

Referências · 6

• 🔥 http://googleprojectzero.blogspot.com/2015/01/exploiting-nvmap-to-escape-chrome.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2014-5332 · Nota de Segurança
• https://ubuntu.com/security/CVE-2014-5332 · Aviso do Fabricante
• http://nvidia.custhelp.com/app/answers/detail/a_id/3618 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2014-5332 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2014-5332 · Nota de Segurança