PT-2016-3585 · Linux+3 · Linux Kernel+3

Asbjoern Sloth Toennesen · Publicado 2015-01-30 · Atualizado 2018-01-05 · CVE-2015-1573

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.18.5

Description The issue is related to the interaction between cross-chain jumps and ruleset flushes in the Linux kernel, specifically in the nft flush table function. This can be exploited by local users with the CAP NET ADMIN capability to cause a denial of service, resulting in a system panic.

Recommendations For Linux kernel versions prior to 3.18.5, update to version 3.18.5 or later to resolve the issue.

Exploit

Correção

DoS

Enumeração de Fraquezas

CWE-19

Identificadores relacionados

ALT-PU-2015-1118

ALT-PU-2015-1794

CESA-2015_1137

CVE-2015-1573

RHSA-2015:1137

RHSA-2015:1138

RHSA-2015:1139

RHSA-2015_1137

RHSA-2015_1139

Produtos afetados

Alt Linux

Centos

Linux Kernel

Red Hat

Referências · 21

• 🔥 https://github.com/retme7/CVE-2014-4322_poc · Exploit
• 🔥 https://github.com/panyu6325/CVE-2015-1805 · Exploit
• 🔥 https://github.com/laginimaineb/cve-2014-4322 · Exploit
• 🔥 https://github.com/marcograss/cve-2014-4323 · Exploit
• 🔥 https://github.com/FloatingGuy/cve-2015-1805 · Exploit
• 🔥 https://github.com/ireshchaminda1/Android-Privilege-Escalation-Remote-Access-Vulnerability-CVE-2015-1805 · Exploit
• https://github.com/torvalds/linux/commit/a2f18db0c68fec96631c10cad9384c196e9008ac · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2015-1573 · Nota de Segurança
• http://kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.18.5 · Nota
• https://bugzilla.redhat.com/show_bug.cgi?id=1190966 · Nota
• http://rhn.redhat.com/errata/RHSA-2015-1137.html · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2015-1573 · Aviso do Fabricante
• https://linux.oracle.com/errata/ELSA-2015-1137.html · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2015-1573 · Nota de Segurança
• http://securityfocus.com/bid/72552 · Nota