PT-2014-5376 · Linux+3 · Linux Kernel+3

Martin Schwidefsky · Published 2014-08-01 · Updated 2023-10-03 · CVE-2014-3534

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.15.8

Description The issue allows local users to obtain read and write access to kernel memory locations, and consequently gain privileges, via a crafted application that makes a ptrace system call. This is due to the Linux kernel not properly restricting address-space control operations in PTRACE POKEUSR AREA requests on the s390 platform.

Recommendations For Linux kernel versions prior to 3.15.8, update to version 3.15.8 or later to resolve the issue. As a temporary workaround, consider restricting the use of ptrace system calls to minimize the risk of exploitation.

Exploit

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

ALT-PU-2014-1970

ALT-PU-2015-1794

CESA-2014_1023

CVE-2014-3534

DSA-2992-1

RHSA-2014:1023

RHSA-2014_1023

Affected Products

Alt Linux

Centos

Linux Kernel

Red Hat

References · 27

• 🔥 https://github.com/retme7/CVE-2014-4322_poc · Exploit
• 🔥 https://github.com/panyu6325/CVE-2015-1805 · Exploit
• 🔥 https://github.com/laginimaineb/cve-2014-4322 · Exploit
• 🔥 https://github.com/marcograss/cve-2014-4323 · Exploit
• 🔥 https://github.com/FloatingGuy/cve-2015-1805 · Exploit
• 🔥 https://github.com/ireshchaminda1/Android-Privilege-Escalation-Remote-Access-Vulnerability-CVE-2015-1805 · Exploit
• https://github.com/torvalds/linux/commit/dab6cf55f81a6e16b8147aed9a843e1691dcd318 · Patch
• http://debian.org/security/2014/dsa-2992 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2014-3534 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2014-1023.html · Vendor Advisory
• http://kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.15.8 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2014-3534 · Vendor Advisory
• https://ubuntu.com/security/CVE-2014-3534 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-3534 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2014-3534 · Vendor Advisory