PT-2013-6336 · Linux+5 · Kernel-Debug-Base-Debuginfo+106

Published 1970-01-01 · Updated 2020-08-14 · CVE-2014-4653

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions openSUSE (affected versions not specified) kernel-default (affected versions not specified) libipset3 (affected versions not specified) ndiswrapper-kmp-pae (affected versions not specified) hdjmod-kmp-xen (affected versions not specified) kernel-trace-base-debuginfo (affected versions not specified) cloop-debugsource (affected versions not specified) crash-kmp-pae-debuginfo (affected versions not specified) ipset-kmp-pae (affected versions not specified) hdjmod-kmp-xen-debuginfo (affected versions not specified) ipset-kmp-pae-debuginfo (affected versions not specified) vhba-kmp-desktop-debuginfo (affected versions not specified) iscsitarget-kmp-pae-debuginfo (affected versions not specified) crash-debugsource (affected versions not specified) iscsitarget-kmp-xen-debuginfo (affected versions not specified) hdjmod-kmp-desktop-debuginfo (affected versions not specified) kernel-xen (affected versions not specified) hdjmod-debugsource (affected versions not specified) crash-doc (affected versions not specified) crash (affected versions not specified) iscsitarget-kmp-xen (affected versions not specified) iscsitarget-debugsource (affected versions not specified) kernel-pae-devel-debuginfo (affected versions not specified) hdjmod-kmp-pae-debuginfo (affected versions not specified) xtables-addons-kmp-default-debuginfo (affected versions not specified) kernel-default-debuginfo (affected versions not specified) kernel-vanilla-devel (affected versions not specified) iscsitarget-kmp-desktop (affected versions not specified) ndiswrapper-debuginfo (affected versions not specified) kernel-pae-debugsource (affected versions not specified) vhba-kmp-default (affected versions not specified) kernel-trace-devel-debuginfo (affected versions not specified) hdjmod-kmp-default-debuginfo (affected versions not specified) cloop-kmp-xen-debuginfo (affected versions not specified) kernel-vanilla-debuginfo (affected versions not specified) vhba-kmp-xen-debuginfo (affected versions not specified) ndiswrapper (affected versions not specified) pcfclock-debuginfo (affected versions not specified) cloop-kmp-desktop (affected versions not specified) hdjmod-kmp-desktop (affected versions not specified) kernel-ec2-debuginfo (affected versions not specified) crash-gcore-debuginfo (affected versions not specified) crash-kmp-default (affected versions not specified) kernel-xen-base-debuginfo (affected versions not specified) ipset-kmp-pae-debuginfo (affected versions not specified) libipset3 (affected versions not specified) ndiswrapper-kmp-desktop-debuginfo (affected versions not specified) crash-debuginfo (affected versions not specified) kernel-ec2-base-debuginfo (affected versions not specified) kernel-desktop (affected versions not specified) xtables-addons-kmp-pae (affected versions not specified) kernel-default-devel (affected versions not specified) ndiswrapper-kmp-default-debuginfo (affected versions not specified) crash-kmp-desktop (affected versions not specified) kernel-vanilla-debugsource (affected versions not specified) crash-eppic-debuginfo (affected versions not specified) vhba-kmp-pae-debuginfo (affected versions not specified) kernel-devel (affected versions not specified) kernel-ec2-devel (affected versions not specified) ipset-devel (affected versions not specified) pcfclock (affected versions not specified) kernel-xen-base (affected versions not specified) cloop-kmp-default-debuginfo (affected versions not specified) kernel-xen-debuginfo (affected versions not specified) kernel-debug-base-debuginfo (affected versions not specified) kernel-desktop-base-debuginfo (affected versions not specified) vhba-kmp-desktop (affected versions not specified) ipset-kmp-default (affected versions not specified) iscsitarget (affected versions not specified) ipset-kmp-xen (affected versions not specified) kernel-desktop-debuginfo (affected versions not specified) kernel-source (affected versions not specified) kernel-debug (affected versions not specified) xtables-addons (affected versions not specified) kernel-desktop-devel-debuginfo (affected versions not specified) crash-devel (affected versions not specified) kernel-trace-base (affected versions not specified) ipset-kmp-desktop-debuginfo (affected versions not specified) xtables-addons-kmp-pae-debuginfo (affected versions not specified) kernel-default-base-debuginfo (affected versions not specified) kernel-ec2-debuginfo (affected versions not specified) kernel-trace-debugsource (affected versions not specified) kernel-debug-base (affected versions not specified) kernel-ec2-devel-debuginfo (affected versions not specified) kernel-trace-debuginfo (affected versions not specified) iscsitarget-kmp-default-debuginfo (affected versions not specified) crash-kmp-pae (affected versions not specified) kernel-default-base (affected versions not specified) cloop-kmp-desktop-debuginfo (affected versions not specified) kernel-xen-devel (affected versions not specified) gfs2-kmp-xen (affected versions not specified) cloop-kmp-default (affected versions not specified) kernel-desktop-debugsource (affected versions not specified) crash-kmp-desktop-debuginfo (affected versions not specified) kernel-pae-devel (affected versions not specified) kernel-desktop-base (affected versions not specified) kernel-default-debugsource (affected versions not specified) pcfclock-kmp-pae-debuginfo (affected versions not specified) iscsitarget-kmp-pae (affected versions not specified) vhba-kmp-xen (affected versions not specified) iscsitarget-debuginfo (affected versions not specified) pcfclock-debugsource (affected versions not specified) hdjmod-kmp-pae (affected versions not specified) kernel-xen-devel-debuginfo (affected versions not specified) vhba-kmp-default-debuginfo (affected versions not specified) kernel-pae-devel (affected versions not specified) crash-kmp-xen (affected versions not specified) kernel-xen-debugsource (affected versions not specified) kernel-trace-devel (affected versions not specified) ndiswrapper-kmp-default (affected versions not specified)

Description The issue affects multiple packages in the openSUSE operating system, allowing for remote exploitation of vulnerabilities that can lead to a violation of confidentiality, integrity, and availability of protected information. The vulnerabilities can be exploited by local users to cause a denial of service and obtain sensitive information from kernel memory.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Race Condition

Use After Free

Weakness Enumeration

CWE-362

CWE-416

Related Identifiers

ALT-PU-2014-1825

ALT-PU-2014-1845

ALT-PU-2014-1846

ALT-PU-2014-1847

ALT-PU-2015-1794

BDU:2015-04307

BDU:2015-04308

BDU:2015-04309

BDU:2015-04310

BDU:2015-05685

BDU:2015-05686

BDU:2015-05687

BDU:2015-05688

BDU:2015-05689

BDU:2015-05690

BDU:2015-05691

BDU:2015-05692

BDU:2015-05693

BDU:2015-05694

BDU:2015-05695

BDU:2015-05696

BDU:2015-05697

BDU:2015-05698

BDU:2015-05699

BDU:2015-05700

BDU:2015-05701

BDU:2015-05702

BDU:2015-05703

BDU:2015-05704

BDU:2015-05705

BDU:2015-05706

BDU:2015-05707

BDU:2015-05708

BDU:2015-05709

BDU:2015-05710

BDU:2015-05711

BDU:2015-05712

BDU:2015-05713

BDU:2015-05714

BDU:2015-05715

BDU:2015-05716

BDU:2015-05717

BDU:2015-05718

BDU:2015-05719

BDU:2015-05720

BDU:2015-05721

BDU:2015-05722

BDU:2015-05723

BDU:2015-05724

BDU:2015-05725

BDU:2015-05726

BDU:2015-05727

BDU:2015-05728

BDU:2015-05729

BDU:2015-05730

BDU:2015-05731

BDU:2015-05732

BDU:2015-05733

BDU:2015-05734

BDU:2015-05735

BDU:2015-05736

BDU:2015-05737

BDU:2015-05738

BDU:2015-05739

BDU:2015-05740

BDU:2015-05741

BDU:2015-05742

BDU:2015-05743

BDU:2015-05744

BDU:2015-05745

BDU:2015-05746

BDU:2015-05747

BDU:2015-05748

BDU:2015-05749

BDU:2015-05750

BDU:2015-05751

BDU:2015-05752

BDU:2015-05753

BDU:2015-05754

BDU:2015-05755

BDU:2015-05756

BDU:2015-05757

BDU:2015-05758

BDU:2015-05759

BDU:2015-05760

BDU:2015-05761

BDU:2015-05762

BDU:2015-05763

BDU:2015-05764

BDU:2015-05765

BDU:2015-05766

BDU:2015-05767

BDU:2015-05768

BDU:2015-05769

BDU:2015-05770

BDU:2015-05771

BDU:2015-05772

BDU:2015-05773

BDU:2015-05774

BDU:2015-05775

BDU:2015-05776

BDU:2015-05777

BDU:2015-05778

BDU:2015-05779

BDU:2015-05780

BDU:2015-05781

BDU:2015-05782

BDU:2015-05783

BDU:2015-05784

BDU:2015-05785

BDU:2015-05786

BDU:2015-05787

BDU:2015-05788

BDU:2015-05789

BDU:2015-05790

BDU:2015-05791

BDU:2015-05792

BDU:2015-05793

BDU:2015-05794

BDU:2015-05795

BDU:2015-05796

BDU:2015-05797

BDU:2015-05798

BDU:2015-05799

BDU:2015-05800

BDU:2015-05801

BDU:2015-05802

BDU:2015-05803

BDU:2015-05804

BDU:2015-05805

BDU:2015-05806

BDU:2015-05807

BDU:2015-05808

BDU:2015-05809

BDU:2015-05810

BDU:2015-05811

BDU:2015-05812

BDU:2015-05813

BDU:2015-05814

BDU:2015-05815

BDU:2015-05816

BDU:2015-05817

BDU:2015-05818

BDU:2015-05819

BDU:2015-05820

BDU:2015-05821

BDU:2015-05822

BDU:2015-05823

BDU:2015-05824

BDU:2015-05825

BDU:2015-05826

BDU:2015-05827

BDU:2015-05828

BDU:2015-05829

BDU:2015-05830

BDU:2015-05831

BDU:2015-05832

BDU:2015-05833

BDU:2015-05834

BDU:2015-05835

BDU:2015-05836

BDU:2015-05837

BDU:2015-05838

BDU:2015-05839

BDU:2015-05840

BDU:2015-05841

BDU:2015-05842

BDU:2015-05843

CESA-2014_1392

CESA-2014_1724

CVE-2014-4653

DLA-103-1

OPENSUSE-SU-2014_0957-1

OPENSUSE-SU-2014_0985-1

RHSA-2014:1083

RHSA-2014:1392

RHSA-2014:1724

RHSA-2014_1392

RHSA-2014_1724

SUSE-RU-2015:0621-1

SUSE-SU-2015:0481-1

SUSE-SU-2015:0581-1

SUSE-SU-2015:0652-1

SUSE-SU-2015:0736-1

SUSE-SU-2015:1174-1

SUSE-SU-2015:1376-1

USN-2332-1

USN-2333-1

USN-2334-1

USN-2335-1

USN-2336-1

USN-2337-1

Affected Products

Alt Linux

Centos

Red Hat

Suse

Ubuntu

Cloop-Debugsource

Cloop-Kmp-Default

Cloop-Kmp-Default-Debuginfo

Cloop-Kmp-Desktop

Cloop-Kmp-Desktop-Debuginfo

Cloop-Kmp-Xen-Debuginfo

Crash

Crash-Debuginfo

Crash-Debugsource

Crash-Devel

Crash-Doc

Crash-Eppic-Debuginfo

Crash-Gcore-Debuginfo

Crash-Kmp-Default

Crash-Kmp-Desktop

Crash-Kmp-Desktop-Debuginfo

Crash-Kmp-Pae

Crash-Kmp-Pae-Debuginfo

Crash-Kmp-Xen

Gfs2-Kmp-Xen

Hdjmod-Debugsource

Hdjmod-Kmp-Default-Debuginfo

Hdjmod-Kmp-Desktop

Hdjmod-Kmp-Desktop-Debuginfo

Hdjmod-Kmp-Pae

Hdjmod-Kmp-Pae-Debuginfo

Hdjmod-Kmp-Xen

Ipset-Devel

Ipset-Kmp-Default

Ipset-Kmp-Desktop-Debuginfo

Ipset-Kmp-Pae

Ipset-Kmp-Pae-Debuginfo

Ipset-Kmp-Xen

Iscsitarget

Iscsitarget-Debuginfo

Iscsitarget-Debugsource

Iscsitarget-Kmp-Default-Debuginfo

Iscsitarget-Kmp-Desktop

Iscsitarget-Kmp-Pae

Iscsitarget-Kmp-Pae-Debuginfo

Iscsitarget-Kmp-Xen

Kernel-Debug

Kernel-Debug-Base

Kernel-Debug-Base-Debuginfo

Kernel-Default

Kernel-Default-Base

Kernel-Default-Base-Debuginfo

Kernel-Default-Debuginfo

Kernel-Default-Debugsource

Kernel-Default-Devel

Kernel-Desktop

Kernel-Desktop-Base

Kernel-Desktop-Base-Debuginfo

Kernel-Desktop-Debuginfo

Kernel-Desktop-Debugsource

Kernel-Devel

Kernel-Ec2-Base-Debuginfo

Kernel-Ec2-Debuginfo

Kernel-Ec2-Devel

Kernel-Ec2-Devel-Debuginfo

Kernel-Pae-Debugsource

Kernel-Pae-Devel

Kernel-Xen-Devel-Debuginfo

Kernel-Source

Kernel-Trace-Base

Kernel-Trace-Base-Debuginfo

Kernel-Trace-Debuginfo

Kernel-Trace-Debugsource

Kernel-Trace-Devel

Kernel-Trace-Devel-Debuginfo

Kernel-Vanilla-Debuginfo

Kernel-Vanilla-Debugsource

Kernel-Vanilla-Devel

Kernel-Xen

Kernel-Xen-Base

Kernel-Xen-Base-Debuginfo

Kernel-Xen-Debuginfo

Kernel-Xen-Debugsource

Kernel-Xen-Devel

Libipset3

Ndiswrapper

Ndiswrapper-Debuginfo

Ndiswrapper-Kmp-Default

Ndiswrapper-Kmp-Default-Debuginfo

Ndiswrapper-Kmp-Desktop-Debuginfo

Ndiswrapper-Kmp-Pae

Opensuse

Pcfclock

Pcfclock-Debuginfo

Pcfclock-Debugsource

Pcfclock-Kmp-Pae-Debuginfo

Vhba-Kmp-Default

Vhba-Kmp-Default-Debuginfo

Vhba-Kmp-Desktop

Vhba-Kmp-Desktop-Debuginfo

Vhba-Kmp-Pae-Debuginfo

Vhba-Kmp-Xen

Vhba-Kmp-Xen-Debuginfo

Xtables-Addons

Xtables-Addons-Kmp-Default-Debuginfo

Xtables-Addons-Kmp-Pae

Xtables-Addons-Kmp-Pae-Debuginfo

References · 219

• 🔥 https://github.com/retme7/CVE-2014-4322_poc · Exploit
• 🔥 https://github.com/panyu6325/CVE-2015-1805 · Exploit
• 🔥 https://github.com/laginimaineb/cve-2014-4322 · Exploit
• 🔥 https://github.com/marcograss/cve-2014-4323 · Exploit
• 🔥 https://github.com/hiikezoe/libfb_mem_exploit · Exploit
• 🔥 https://github.com/FloatingGuy/cve-2015-1805 · Exploit
• 🔥 https://github.com/ireshchaminda1/Android-Privilege-Escalation-Remote-Access-Vulnerability-CVE-2015-1805 · Exploit
• https://github.com/torvalds/linux/commit/fd9f26e4eca5d08a27d12c0933fceef76ed9663d · Patch
• https://bdu.fstec.ru/vul/2015-05777 · Security Note
• https://bdu.fstec.ru/vul/2015-05705 · Security Note
• https://bdu.fstec.ru/vul/2015-05698 · Security Note
• https://bdu.fstec.ru/vul/2015-05725 · Security Note
• https://bdu.fstec.ru/vul/2015-05800 · Security Note
• https://bdu.fstec.ru/vul/2015-05693 · Security Note
• https://bdu.fstec.ru/vul/2015-05761 · Security Note