PT-2016-2634 · Google+2 · Android+2

Publicado 2014-04-02 · Atualizado 2016-11-28 · CVE-2014-9870

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.11 on ARM platforms Android versions prior to 2016-08-05 on Nexus 5 and 7 (2013) devices

Description The issue is related to improper consideration of user-space access to the TPIDRURW register. This allows local users to gain privileges via a crafted application.

Recommendations For Linux kernel versions prior to 3.11 on ARM platforms, update to version 3.11 or later to resolve the issue. For Android versions prior to 2016-08-05 on Nexus 5 and 7 (2013) devices, update to a version released after 2016-08-05 to resolve the issue.

Exploit

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

ALT-PU-2014-1422

BDU:2016-02026

CVE-2014-9870

Produtos afetados

Alt Linux

Android

Linux Kernel

Referências · 160

• 🔥 https://github.com/luan0ap/cve-2018-14634 · Exploit
• https://github.com/torvalds/linux/commit/d049f74f2dbe71354d43d393ac3a188947811348 · Nota
• https://github.com/torvalds/linux/commit/a8b33654b1e3b0c74d4a1fed041c9aae50b3c427 · Nota
• https://github.com/torvalds/linux/commit/a4780adeefd042482f624f5e0d577bf9cdcbb760 · Correção
• https://github.com/torvalds/linux/commit/2433c8f094a008895e66f25bd1773cdb01c91d01 · Nota
• https://github.com/torvalds/linux/commit/95ee62083cb6453e056562d91f597552021e6ae7 · Nota
• https://github.com/torvalds/linux/commit/a399b29dfbaaaf91162b2dc5a5875dd51bbfa2a1 · Nota
• https://github.com/torvalds/linux/commit/12ae030d54ef250706da5642fc7697cc60ad0df7 · Nota
• https://github.com/torvalds/linux/commit/2811ebac2521ceac84f2bdae402455baa6a7fb47 · Nota
• https://github.com/torvalds/linux/commit/c547dbf55d5f8cf615ccc0e7265e98db27d3fb8b · Nota
• https://github.com/torvalds/linux/commit/201f99f170df14ba52ea4c52847779042b7a623b · Nota
• https://github.com/torvalds/linux/commit/2690d97ade05c5325cbf7c72b94b90d265659886 · Nota
• https://github.com/torvalds/linux/commit/6fb392b1a63ae36c31f62bc3fc8630b49d602b62 · Nota
• https://github.com/torvalds/linux/commit/e93b7d748be887cd7639b113ba7d7ef792a7efb9 · Nota
• https://github.com/torvalds/linux/commit/fda4e2e85589191b123d31cdc21fd33ee70f50fd · Nota