PT-2013-6337 · Opensuse+6 · Crash-Eppic-Debuginfo+130

Published 1970-01-01 · Updated 2020-08-14 · CVE-2014-4654

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions openSUSE kernel-default (affected versions not specified) openSUSE libipset3 (affected versions not specified) openSUSE ndiswrapper-kmp-pae (affected versions not specified) openSUSE hdjmod-kmp-xen (affected versions not specified) openSUSE kernel-trace-base-debuginfo (affected versions not specified) openSUSE cloop-debugsource (affected versions not specified) openSUSE crash-kmp-pae-debuginfo (affected versions not specified) openSUSE ipset-kmp-pae (affected versions not specified) openSUSE hdjmod-kmp-xen-debuginfo (affected versions not specified) openSUSE ipset-kmp-pae-debuginfo (affected versions not specified) openSUSE vhba-kmp-desktop-debuginfo (affected versions not specified) openSUSE iscsitarget-kmp-pae-debuginfo (affected versions not specified) openSUSE crash-debugsource (affected versions not specified) openSUSE iscsitarget-kmp-xen-debuginfo (affected versions not specified) openSUSE hdjmod-kmp-desktop-debuginfo (affected versions not specified) openSUSE kernel-xen (affected versions not specified) openSUSE hdjmod-debugsource (affected versions not specified) openSUSE crash-doc (affected versions not specified) openSUSE crash (affected versions not specified) openSUSE iscsitarget-kmp-xen (affected versions not specified) openSUSE iscsitarget-debugsource (affected versions not specified) openSUSE kernel-pae-devel-debuginfo (affected versions not specified) openSUSE hdjmod-kmp-pae-debuginfo (affected versions not specified) openSUSE xtables-addons-kmp-default-debuginfo (affected versions not specified) openSUSE kernel-default-debuginfo (affected versions not specified) openSUSE kernel-vanilla-devel (affected versions not specified) openSUSE iscsitarget-kmp-desktop (affected versions not specified) openSUSE ndiswrapper-debuginfo (affected versions not specified) openSUSE kernel-pae-debugsource (affected versions not specified) openSUSE vhba-kmp-default (affected versions not specified) openSUSE kernel-trace-devel-debuginfo (affected versions not specified) openSUSE hdjmod-kmp-default-debuginfo (affected versions not specified) openSUSE cloop-kmp-xen-debuginfo (affected versions not specified) openSUSE kernel-vanilla-debuginfo (affected versions not specified) openSUSE vhba-kmp-xen-debuginfo (affected versions not specified) openSUSE ndiswrapper (affected versions not specified) openSUSE pcfclock-debuginfo (affected versions not specified) openSUSE cloop-kmp-desktop (affected versions not specified) openSUSE hdjmod-kmp-desktop (affected versions not specified) openSUSE kernel-ec2 (affected versions not specified) openSUSE crash-kmp-default (affected versions not specified) openSUSE kernel-xen-base-debuginfo (affected versions not specified) openSUSE ipset-kmp-default-debuginfo (affected versions not specified) openSUSE libipset3 (affected versions not specified) openSUSE ndiswrapper-kmp-desktop-debuginfo (affected versions not specified) openSUSE crash-debuginfo (affected versions not specified) openSUSE kernel-ec2-base-debuginfo (affected versions not specified) openSUSE kernel-desktop (affected versions not specified) openSUSE xtables-addons-kmp-pae (affected versions not specified) openSUSE kernel-default-devel (affected versions not specified) openSUSE ndiswrapper-kmp-default-debuginfo (affected versions not specified) openSUSE crash-kmp-desktop (affected versions not specified) openSUSE kernel-vanilla-debugsource (affected versions not specified) openSUSE crash-eppic-debuginfo (affected versions not specified) openSUSE vhba-kmp-pae-debuginfo (affected versions not specified) openSUSE kernel-devel (affected versions not specified) openSUSE kernel-ec2-devel (affected versions not specified) openSUSE ipset-devel (affected versions not specified) openSUSE pcfclock (affected versions not specified) openSUSE kernel-xen-base (affected versions not specified) openSUSE cloop-kmp-default-debuginfo (affected versions not specified) openSUSE kernel-xen-debuginfo (affected versions not specified) openSUSE kernel-debug-base-debuginfo (affected versions not specified) openSUSE kernel-desktop-debuginfo (affected versions not specified) openSUSE vhba-kmp-desktop (affected versions not specified) openSUSE ipset-kmp-default (affected versions not specified) openSUSE iscsitarget (affected versions not specified) openSUSE ipset-kmp-xen (affected versions not specified) openSUSE kernel-desktop-debuginfo (affected versions not specified) openSUSE kernel-source (affected versions not specified) openSUSE kernel-debug (affected versions not specified) openSUSE xtables-addons (affected versions not specified) openSUSE kernel-desktop-devel-debuginfo (affected versions not specified) openSUSE crash-devel (affected versions not specified) openSUSE ipset-kmp-desktop-debuginfo (affected versions not specified) openSUSE kernel-trace-base (affected versions not specified) openSUSE xtables-addons-kmp-pae-debuginfo (affected versions not specified) openSUSE kernel-default-base-debuginfo (affected versions not specified) openSUSE kernel-ec2 (affected versions not specified) openSUSE kernel-debug-base (affected versions not specified) openSUSE kernel-xen-devel (affected versions not specified) openSUSE cloop-debuginfo (affected versions not specified) openSUSE vhba-kmp-pae (affected versions not specified) openSUSE pcfclock-kmp-default-debuginfo (affected versions not specified) openSUSE iscsitarget-kmp-default (affected versions not specified) openSUSE kernel-pae-base (affected versions not specified) openSUSE kernel-ec2-debugsource (affected versions not specified) openSUSE ipset (affected versions not specified) openSUSE ndiswrapper-kmp-desktop (affected versions not specified) openSUSE cloop-kmp-xen (affected versions not specified) openSUSE hdjmod-kmp-default (affected versions not specified) openSUSE kernel-vanilla-devel-debuginfo (affected versions not specified) openSUSE crash-gcore (affected versions not specified) openSUSE ipset-kmp-desktop (affected versions not specified) openSUSE kernel-docs (affected versions not specified) openSUSE kernel-ec2-devel (affected versions not specified) openSUSE crash-kmp-default-debuginfo (affected versions not specified) openSUSE kernel-ec2-base (affected versions not specified) openSUSE xtables-addons-debugsource (affected versions not specified) openSUSE kernel-vanilla (affected versions not specified) openSUSE pcfclock-kmp-default (affected versions not specified) openSUSE kernel-default-devel-debuginfo (affected versions not specified) openSUSE kernel-source-vanilla (affected versions not specified) openSUSE cloop-kmp-pae (affected versions not specified) openSUSE iscsitarget-kmp-desktop-debuginfo (affected versions not specified) openSUSE kernel-pae-base-debuginfo (affected versions not specified) openSUSE cloop-kmp-pae-debuginfo (affected versions not specified) openSUSE pcfclock-kmp-desktop (affected versions not specified) openSUSE kernel-pae (affected versions not specified) openSUSE kernel-debug-debugsource (affected versions not specified) openSUSE kernel-trace-debuginfo (affected versions not specified) openSUSE crash-eppic (affected versions not specified) openSUSE iscsitarget-kmp-default-debuginfo (affected versions not specified) openSUSE crash-kmp-pae (affected versions not specified) openSUSE kernel-default-base (affected versions not specified) openSUSE cloop-kmp-desktop-debuginfo (affected versions not specified) openSUSE kernel-xen-devel (affected versions not specified) openSUSE gfs2-kmp-xen (affected versions not specified) openSUSE cloop-kmp-default (affected versions not specified) openSUSE kernel-desktop-debugsource (affected versions not specified) openSUSE crash-kmp-desktop-debuginfo (affected versions not specified) openSUSE kernel-default-debugsource (affected versions not specified) openSUSE kernel-pae-devel (affected versions not specified) openSUSE kernel-desktop-base (affected versions not specified) openSUSE pcfclock-kmp-pae-debuginfo (affected versions not specified) openSUSE iscsitarget-kmp-pae (affected versions not specified) openSUSE vhba-kmp-xen (affected versions not specified) openSUSE iscsitarget-debuginfo (affected versions not specified) openSUSE pcfclock-debugsource (affected versions not specified) openSUSE hdjmod-kmp-pae (affected versions not specified) openSUSE kernel-xen-devel-debuginfo (affected versions not specified) openSUSE vhba-kmp-default-debuginfo (affected versions not specified) openSUSE kernel-pae-devel (affected versions not specified) openSUSE kernel-xen-debugsource (affected versions not specified) openSUSE crash-kmp-xen (affected versions not specified) openSUSE kernel-trace-devel (affected versions not specified) openSUSE ndiswrapper-kmp-default (affected versions not specified)

Description The issue is related to multiple vulnerabilities in various packages of the openSUSE operating system. These vulnerabilities can be exploited remotely and may lead to a violation of confidentiality, integrity, and availability of protected information. The vulnerabilities can be exploited by leveraging access to /dev/snd/controlCX for an ioctl call, which may cause a denial of service (use-after-free and system crash). The snd ctl elem add function in sound/core/control.c in the ALSA control implementation in the Linux kernel before 3.15.2 does not check authorization for SNDRV CTL IOCTL ELEM REPLACE commands.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Race Condition

Use After Free

Weakness Enumeration

CWE-362

CWE-416

Related Identifiers

ALT-PU-2014-1825

ALT-PU-2014-1845

ALT-PU-2014-1846

ALT-PU-2014-1847

ALT-PU-2015-1794

BDU:2015-04307

BDU:2015-04308

BDU:2015-04309

BDU:2015-04310

BDU:2015-05685

BDU:2015-05686

BDU:2015-05687

BDU:2015-05688

BDU:2015-05689

BDU:2015-05690

BDU:2015-05691

BDU:2015-05692

BDU:2015-05693

BDU:2015-05694

BDU:2015-05695

BDU:2015-05696

BDU:2015-05697

BDU:2015-05698

BDU:2015-05699

BDU:2015-05700

BDU:2015-05701

BDU:2015-05702

BDU:2015-05703

BDU:2015-05704

BDU:2015-05705

BDU:2015-05706

BDU:2015-05707

BDU:2015-05708

BDU:2015-05709

BDU:2015-05710

BDU:2015-05711

BDU:2015-05712

BDU:2015-05713

BDU:2015-05714

BDU:2015-05715

BDU:2015-05716

BDU:2015-05717

BDU:2015-05718

BDU:2015-05719

BDU:2015-05720

BDU:2015-05721

BDU:2015-05722

BDU:2015-05723

BDU:2015-05724

BDU:2015-05725

BDU:2015-05726

BDU:2015-05727

BDU:2015-05728

BDU:2015-05729

BDU:2015-05730

BDU:2015-05731

BDU:2015-05732

BDU:2015-05733

BDU:2015-05734

BDU:2015-05735

BDU:2015-05736

BDU:2015-05737

BDU:2015-05738

BDU:2015-05739

BDU:2015-05740

BDU:2015-05741

BDU:2015-05742

BDU:2015-05743

BDU:2015-05744

BDU:2015-05745

BDU:2015-05746

BDU:2015-05747

BDU:2015-05748

BDU:2015-05749

BDU:2015-05750

BDU:2015-05751

BDU:2015-05752

BDU:2015-05753

BDU:2015-05754

BDU:2015-05755

BDU:2015-05756

BDU:2015-05757

BDU:2015-05758

BDU:2015-05759

BDU:2015-05760

BDU:2015-05761

BDU:2015-05762

BDU:2015-05763

BDU:2015-05764

BDU:2015-05765

BDU:2015-05766

BDU:2015-05767

BDU:2015-05768

BDU:2015-05769

BDU:2015-05770

BDU:2015-05771

BDU:2015-05772

BDU:2015-05773

BDU:2015-05774

BDU:2015-05775

BDU:2015-05776

BDU:2015-05777

BDU:2015-05778

BDU:2015-05779

BDU:2015-05780

BDU:2015-05781

BDU:2015-05782

BDU:2015-05783

BDU:2015-05784

BDU:2015-05785

BDU:2015-05786

BDU:2015-05787

BDU:2015-05788

BDU:2015-05789

BDU:2015-05790

BDU:2015-05791

BDU:2015-05792

BDU:2015-05793

BDU:2015-05794

BDU:2015-05795

BDU:2015-05796

BDU:2015-05797

BDU:2015-05798

BDU:2015-05799

BDU:2015-05800

BDU:2015-05801

BDU:2015-05802

BDU:2015-05803

BDU:2015-05804

BDU:2015-05805

BDU:2015-05806

BDU:2015-05807

BDU:2015-05808

BDU:2015-05809

BDU:2015-05810

BDU:2015-05811

BDU:2015-05812

BDU:2015-05813

BDU:2015-05814

BDU:2015-05815

BDU:2015-05816

BDU:2015-05817

BDU:2015-05818

BDU:2015-05819

BDU:2015-05820

BDU:2015-05821

BDU:2015-05822

BDU:2015-05823

BDU:2015-05824

BDU:2015-05825

BDU:2015-05826

BDU:2015-05827

BDU:2015-05828

BDU:2015-05829

BDU:2015-05830

BDU:2015-05831

BDU:2015-05832

BDU:2015-05833

BDU:2015-05834

BDU:2015-05835

BDU:2015-05836

BDU:2015-05837

BDU:2015-05838

BDU:2015-05839

BDU:2015-05840

BDU:2015-05841

BDU:2015-05842

BDU:2015-05843

CESA-2014_1392

CESA-2014_1971

CVE-2014-4654

DLA-103-1

OPENSUSE-SU-2014_0957-1

OPENSUSE-SU-2014_0985-1

RHSA-2014:1083

RHSA-2014:1392

RHSA-2014:1971

RHSA-2014_1392

RHSA-2014_1971

SUSE-RU-2015:0621-1

SUSE-SU-2015:0481-1

SUSE-SU-2015:0581-1

SUSE-SU-2015:0652-1

SUSE-SU-2015:0736-1

SUSE-SU-2015:1174-1

SUSE-SU-2015:1376-1

USN-2332-1

USN-2333-1

USN-2334-1

USN-2335-1

USN-2336-1

USN-2337-1

Affected Products

Alt Linux

Centos

Linux Kernel

Red Hat

Suse

Ubuntu

Cloop-Debuginfo

Cloop-Debugsource

Cloop-Kmp-Default

Cloop-Kmp-Default-Debuginfo

Cloop-Kmp-Desktop

Cloop-Kmp-Desktop-Debuginfo

Cloop-Kmp-Pae

Cloop-Kmp-Pae-Debuginfo

Cloop-Kmp-Xen

Cloop-Kmp-Xen-Debuginfo

Crash

Crash-Debuginfo

Crash-Debugsource

Crash-Devel

Crash-Doc

Crash-Eppic

Crash-Eppic-Debuginfo

Crash-Gcore

Crash-Kmp-Default

Crash-Kmp-Default-Debuginfo

Crash-Kmp-Desktop

Crash-Kmp-Desktop-Debuginfo

Crash-Kmp-Pae

Crash-Kmp-Pae-Debuginfo

Crash-Kmp-Xen

Gfs2-Kmp-Xen

Hdjmod-Debugsource

Hdjmod-Kmp-Default

Hdjmod-Kmp-Default-Debuginfo

Hdjmod-Kmp-Desktop

Hdjmod-Kmp-Desktop-Debuginfo

Hdjmod-Kmp-Pae

Hdjmod-Kmp-Pae-Debuginfo

Hdjmod-Kmp-Xen

Ipset

Ipset-Devel

Ipset-Kmp-Default

Ipset-Kmp-Default-Debuginfo

Ipset-Kmp-Desktop

Ipset-Kmp-Desktop-Debuginfo

Ipset-Kmp-Pae

Ipset-Kmp-Pae-Debuginfo

Ipset-Kmp-Xen

Iscsitarget

Iscsitarget-Debuginfo

Iscsitarget-Debugsource

Iscsitarget-Kmp-Default

Iscsitarget-Kmp-Default-Debuginfo

Iscsitarget-Kmp-Desktop

Iscsitarget-Kmp-Desktop-Debuginfo

Iscsitarget-Kmp-Pae

Iscsitarget-Kmp-Pae-Debuginfo

Iscsitarget-Kmp-Xen

Kernel-Debug

Kernel-Debug-Base

Kernel-Debug-Base-Debuginfo

Kernel-Debug-Debugsource

Kernel-Default

Kernel-Default-Base

Kernel-Default-Base-Debuginfo

Kernel-Default-Debuginfo

Kernel-Default-Debugsource

Kernel-Default-Devel

Kernel-Desktop

Kernel-Desktop-Base

Kernel-Desktop-Debuginfo

Kernel-Desktop-Debugsource

Kernel-Devel

Kernel-Doc

Kernel-Ec2

Kernel-Ec2-Base

Kernel-Ec2-Base-Debuginfo

Kernel-Ec2-Debugsource

Kernel-Ec2-Devel

Kernel-Pae

Kernel-Pae-Base

Kernel-Trace-Base-Debuginfo

Kernel-Pae-Debugsource

Kernel-Pae-Devel

Kernel-Xen-Devel-Debuginfo

Kernel-Source

Kernel-Source-Vanilla

Kernel-Trace-Base

Kernel-Trace-Debuginfo

Kernel-Trace-Devel

Kernel-Trace-Devel-Debuginfo

Kernel-Vanilla

Kernel-Vanilla-Debuginfo

Kernel-Vanilla-Debugsource

Kernel-Vanilla-Devel

Kernel-Vanilla-Devel-Debuginfo

Kernel-Xen

Kernel-Xen-Base

Kernel-Xen-Base-Debuginfo

Kernel-Xen-Debuginfo

Kernel-Xen-Debugsource

Kernel-Xen-Devel

Libipset3

Ndiswrapper

Ndiswrapper-Debuginfo

Ndiswrapper-Kmp-Default

Ndiswrapper-Kmp-Default-Debuginfo

Ndiswrapper-Kmp-Desktop

Ndiswrapper-Kmp-Desktop-Debuginfo

Ndiswrapper-Kmp-Pae

Pcfclock

Pcfclock-Debuginfo

Pcfclock-Debugsource

Pcfclock-Kmp-Default

Pcfclock-Kmp-Default-Debuginfo

Pcfclock-Kmp-Desktop

Pcfclock-Kmp-Pae-Debuginfo

Vhba-Kmp-Default

Vhba-Kmp-Default-Debuginfo

Vhba-Kmp-Desktop

Vhba-Kmp-Desktop-Debuginfo

Vhba-Kmp-Pae

Vhba-Kmp-Pae-Debuginfo

Vhba-Kmp-Xen

Vhba-Kmp-Xen-Debuginfo

Xtables-Addons

Xtables-Addons-Debugsource

Xtables-Addons-Kmp-Default-Debuginfo

Xtables-Addons-Kmp-Pae

Xtables-Addons-Kmp-Pae-Debuginfo

References · 219

• 🔥 https://github.com/retme7/CVE-2014-4322_poc · Exploit
• 🔥 https://github.com/panyu6325/CVE-2015-1805 · Exploit
• 🔥 https://github.com/laginimaineb/cve-2014-4322 · Exploit
• 🔥 https://github.com/marcograss/cve-2014-4323 · Exploit
• 🔥 https://github.com/hiikezoe/libfb_mem_exploit · Exploit
• 🔥 https://github.com/FloatingGuy/cve-2015-1805 · Exploit
• 🔥 https://github.com/ireshchaminda1/Android-Privilege-Escalation-Remote-Access-Vulnerability-CVE-2015-1805 · Exploit
• https://github.com/torvalds/linux/commit/82262a46627bebb0febcc26664746c25cef08563 · Patch
• https://bdu.fstec.ru/vul/2015-05777 · Security Note
• https://bdu.fstec.ru/vul/2015-05705 · Security Note
• https://bdu.fstec.ru/vul/2015-05698 · Security Note
• https://bdu.fstec.ru/vul/2015-05725 · Security Note
• https://bdu.fstec.ru/vul/2015-05800 · Security Note
• https://bdu.fstec.ru/vul/2015-05693 · Security Note
• https://bdu.fstec.ru/vul/2015-05761 · Security Note