PT-2014-7880 · Linux+2 · Linux Kernel+2

Hannes Frederic Sowa · Published 2014-05-08 · Updated 2020-08-06 · CVE-2014-7283

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Medium

Base vector

AV:L/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.14.2

Description The issue is related to the xfs da3 fixhashpath function in the xfs implementation, which does not properly compare btree hash values. This allows local users to cause a denial of service, resulting in filesystem corruption, and potentially leading to an OOPS or panic, via operations on directories that have hash collisions. An example of such an operation is an rmdir operation.

Recommendations For Linux kernel versions prior to 3.14.2, update to version 3.14.2 or later to resolve the issue.

Exploit

Fix

DoS

Weakness Enumeration

CWE-399

Related Identifiers

ALT-PU-2014-1602

ALT-PU-2014-2064

CVE-2014-7283

MGASA-2014-0451

MGASA-2014-0452

MGASA-2014-0455

RHSA-2014:1943

USN-2226-1

USN-2239-1

USN-2260-1

USN-2394-1

Affected Products

Alt Linux

Linux Kernel

Ubuntu

References · 72

• 🔥 https://github.com/torvalds/linux/commit/c88547a8119e3b581318ab65e9b72f27f23e641d · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/recvmmsg_priv_esc.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/android/local/futex_requeue.rb · Exploit
• 🔥 https://github.com/saelo/cve-2014-0038 · Exploit
• 🔥 https://github.com/timwr/CVE-2014-3153 · Exploit
• 🔥 https://github.com/android-rooting-tools/libfutex_exploit · Exploit
• 🔥 https://github.com/lieanu/CVE-2014-3153 · Exploit
• 🔥 https://github.com/elongl/CVE-2014-3153 · Exploit
• 🔥 https://github.com/zerodavinci/CVE-2014-3153-exploit · Exploit
• 🔥 https://github.com/tempbottle/CVE-2014-0196 · Exploit
• 🔥 https://bugzilla.redhat.com/show_bug.cgi?id=1148777 · Exploit
• 🔥 http://marc.info/?l=linux-xfs&m=139590613002926&w=2 · Exploit
• 🔥 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=c88547a8119e3b581318ab65e9b72f27f23e641d · Exploit
• https://advisories.mageia.org/MGASA-2014-0451.html · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2014-7283 · Vendor Advisory