PT-2015-5374 · Linux+5 · Linux Kernel+5
Hector Marco Gisbert
·
Publicado
2015-02-13
·
Atualizado
2019-11-05
·
CVE-2015-1593
CVSS v2.0
5.0
Média
| Vetor | AV:N/AC:L/Au:N/C:P/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 3.19.1
Description
The issue is related to the stack randomization feature in the Linux kernel, which uses incorrect data types for the results of bitwise left-shift operations. This makes it easier for attackers to bypass the Address Space Layout Randomization (ASLR) protection mechanism by predicting the address of the top of the stack. The problem is associated with the
randomize stack top function in fs/binfmt elf.c and the stack maxrandom size function in arch/x86/mm/mmap.c.Recommendations
For Linux kernel versions prior to 3.19.1, update to version 3.19.1 or later to resolve the issue.
Exploit
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Centos
Linux Kernel
Red Hat
Suse
Ubuntu