PT-2013-6314 · Suse+5 · Suse Linux Enterprise Kernel-Ec2-Devel+9

Published 1970-01-01 · Updated 2023-02-13 · CVE-2014-3145

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions through 3.14.3 SUSE Linux Enterprise kernel-pae-devel (affected versions not specified) SUSE Linux Enterprise kernel-xen-devel (affected versions not specified) SUSE Linux Enterprise gfs2-kmp-xen (affected versions not specified) SUSE Linux Enterprise kernel-ec2-devel (affected versions not specified)

Description The issue allows local users to cause a denial of service (over-read and system crash) via crafted BPF instructions. The BPF S ANC NLATTR NEST extension implementation in the sk run filter function in net/core/filter.c uses the reverse order in a certain subtraction. Additionally, multiple vulnerabilities in SUSE Linux Enterprise packages may lead to disruption of confidentiality, integrity, and availability of protected information, and can be exploited remotely.

Recommendations For Linux kernel versions through 3.14.3: Update to a version later than 3.14.3 to resolve the issue. For SUSE Linux Enterprise kernel-pae-devel: At the moment, there is no information about a newer version that contains a fix for this vulnerability. For SUSE Linux Enterprise kernel-xen-devel: At the moment, there is no information about a newer version that contains a fix for this vulnerability. For SUSE Linux Enterprise gfs2-kmp-xen: At the moment, there is no information about a newer version that contains a fix for this vulnerability. For SUSE Linux Enterprise kernel-ec2-devel: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Out of bounds Read

Weakness Enumeration

CWE-189

CWE-125

Related Identifiers

ALT-PU-2014-1634

ALT-PU-2014-1820

ALT-PU-2014-2064

BDU:2014-00064

BDU:2015-04307

BDU:2015-04308

BDU:2015-04309

BDU:2015-04310

CESA-2014_0981

CVE-2014-3145

DLA-0015-1

DSA-2949-1

OPENSUSE-SU-2014_0840-1

OPENSUSE-SU-2014_0957-1

RHSA-2014:0786

RHSA-2014:0913

RHSA-2014:0981

RHSA-2014_0786

RHSA-2014_0981

SUSE-RU-2015:0621-1

SUSE-SU-2015:0481-1

SUSE-SU-2015:0581-1

SUSE-SU-2015:0652-1

SUSE-SU-2015:0736-1

SUSE-SU-2015:1174-1

SUSE-SU-2015:1376-1

USN-2251-1

USN-2252-1

USN-2259-1

USN-2261-1

USN-2262-1

USN-2263-1

USN-2264-1

USN-2286-1

USN-2288-1

USN-2290-1

Affected Products

Alt Linux

Centos

Linux Kernel

Red Hat

Suse Linux Enterprise Gfs2-Kmp-Xen

Suse Linux Enterprise Kernel-Ec2-Devel

Suse Linux Enterprise Kernel-Pae-Devel

Suse Linux Enterprise Kernel-Xen-Devel

Suse

Ubuntu

References · 66

• 🔥 https://github.com/torvalds/linux/commit/05ab8f2647e4221cbdb3856dd7d32bd5407316b3 · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/recvmmsg_priv_esc.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/android/local/futex_requeue.rb · Exploit
• 🔥 https://github.com/saelo/cve-2014-0038 · Exploit
• 🔥 https://github.com/timwr/CVE-2014-3153 · Exploit
• 🔥 https://github.com/android-rooting-tools/libfutex_exploit · Exploit
• 🔥 https://github.com/lieanu/CVE-2014-3153 · Exploit
• 🔥 https://github.com/elongl/CVE-2014-3153 · Exploit
• 🔥 https://github.com/zerodavinci/CVE-2014-3153-exploit · Exploit
• 🔥 https://github.com/tempbottle/CVE-2014-0196 · Exploit
• https://osv.dev/vulnerability/CVE-2014-3145 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-2263-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-2262-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2014-00064 · Security Note
• https://linux.oracle.com/errata/ELSA-2014-0981.html · Vendor Advisory