PT-2016-3618 · Linux+3 · Linux Kernel+3

Sami Farin · Publicado 2014-02-21 · Atualizado 2017-11-12 · CVE-2015-4170

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Média

Vetor base

AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.13-rc4-next-20131218

Description A race condition exists in the ldsem cmpxchg function, allowing local users to cause a denial of service. This can lead to a deadlock between ldsem down read and ldsem down write by establishing a new tty thread during the shutdown of a previous tty thread.

Recommendations For Linux kernel versions prior to 3.13-rc4-next-20131218, update to version 3.13-rc4-next-20131218 or later to resolve the issue.

Exploit

Correção

DoS

Race Condition

Enumeração de Fraquezas

CWE-362

Identificadores relacionados

ALT-PU-2014-1232

ALT-PU-2014-2064

CESA-2015_2152

CVE-2015-4170

RHSA-2015:2152

RHSA-2015:2411

RHSA-2015_2152

RHSA-2015_2411

RHSA-2016:1395

Produtos afetados

Alt Linux

Centos

Linux Kernel

Red Hat

Referências · 28

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/recvmmsg_priv_esc.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/android/local/futex_requeue.rb · Exploit
• 🔥 https://github.com/saelo/cve-2014-0038 · Exploit
• 🔥 https://github.com/timwr/CVE-2014-3153 · Exploit
• 🔥 https://github.com/android-rooting-tools/libfutex_exploit · Exploit
• 🔥 https://github.com/lieanu/CVE-2014-3153 · Exploit
• 🔥 https://github.com/elongl/CVE-2014-3153 · Exploit
• 🔥 https://github.com/Kagami/docker_cve-2015-2925 · Exploit
• 🔥 https://github.com/zerodavinci/CVE-2014-3153-exploit · Exploit
• 🔥 https://github.com/tempbottle/CVE-2014-0196 · Exploit
• https://github.com/torvalds/linux/commit/cf872776fc84128bb779ce2b83a37c884c3203ae · Nota
• https://bugzilla.redhat.com/show_bug.cgi?id=1218879 · Nota
• https://osv.dev/vulnerability/UBUNTU-CVE-2015-4170 · Aviso do Fabricante
• https://access.redhat.com/errata/RHSA-2016:1395 · Aviso do Fabricante
• https://kernel.org/pub/linux/kernel/next/patch-v3.13-rc4-next-20131218.xz · Correção