PT-2019-7091 · Linux+1 · Linux Kernel+1

Chris + 1 · Publicado 2014-10-23 · Atualizado 2024-08-06 · CVE-2014-3180

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.17

Description There is a possible out-of-bounds read in the Linux kernel. The restart syscall function uses uninitialized data when restarting compat sys nanosleep. However, this issue is disputed because the code path is reportedly unreachable.

Recommendations For Linux kernel versions prior to 3.17, update to version 3.17 or later to resolve the issue. As a temporary workaround, consider restricting access to the compat sys nanosleep function until a patch is available.

Exploit

Correção

Out of bounds Read

Enumeração de Fraquezas

CWE-125

Identificadores relacionados

ALT-PU-2014-2297

ALT-PU-2015-1794

CVE-2014-3180

Produtos afetados

Alt Linux

Linux Kernel

Referências · 367

• 🔥 https://github.com/retme7/CVE-2014-4322_poc · Exploit
• 🔥 https://github.com/panyu6325/CVE-2015-1805 · Exploit
• 🔥 https://github.com/laginimaineb/cve-2014-4322 · Exploit
• 🔥 https://github.com/marcograss/cve-2014-4323 · Exploit
• 🔥 https://github.com/FloatingGuy/cve-2015-1805 · Exploit
• 🔥 https://github.com/ireshchaminda1/Android-Privilege-Escalation-Remote-Access-Vulnerability-CVE-2015-1805 · Exploit
• https://github.com/torvalds/linux/commit/410dd3cf4c9b36f27ed4542ee18b1af5e68645a4 · Nota
• https://github.com/torvalds/linux/commit/e40607cbe270a9e8360907cb1e62ddf0736e4864 · Nota
• https://github.com/torvalds/linux/commit/c03aa9f6e1f938618e6db2e23afef0574efeeb65 · Nota
• https://github.com/torvalds/linux/commit/4e7c22d447bb6d7e37bfe39ff658486ae78e8d77 · Nota
• https://github.com/torvalds/linux/commit/c54def7bd64d7c0b6993336abcffb8444795bf38 · Nota
• https://github.com/torvalds/linux/commit/26b87c7881006311828bb0ab271a551a62dcceb4 · Nota
• https://github.com/torvalds/linux/commit/350b8bdd689cd2ab2c67c8a86a0be86cfa0751a7 · Nota
• https://github.com/torvalds/linux/commit/3d32e4dbe71374a6780eaf51d719d76f9a9bf22f · Nota
• https://github.com/torvalds/linux/commit/95389b08d93d5c06ec63ab49bd732b0069b7c35e · Nota