PT-2014-8348 · Linux+5 · Linux Kernel+5

Published

2014-10-13

·

Updated

2020-08-14

·

CVE-2014-7970

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.18
Description The issue is related to the pivot root implementation in the Linux kernel, which does not properly handle certain locations of a chroot directory. This allows local users to cause a denial of service, resulting in a mount-tree loop, by providing . (dot) values in both arguments to the pivot root() system call.
Recommendations For Linux kernel versions prior to 3.18, update to version 3.18 or later to resolve the issue.

Exploit

Fix

DoS

Resource Exhaustion

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-400

Related Identifiers

ALT-PU-2014-2297
ALT-PU-2015-1794
CESA-2017_1842
CVE-2014-7970
MGASA-2014-0451
MGASA-2014-0452
MGASA-2014-0453
MGASA-2014-0454
MGASA-2014-0455
MGASA-2014-0456
MGASA-2014-0459
MGASA-2014-0479
MGASA-2015-0075
MGASA-2015-0076
MGASA-2015-0077
MGASA-2015-0078
RHSA-2017:1842
RHSA-2017:2077
RHSA-2017_1842
RHSA-2017_2077
SUSE-RU-2015:0621-1
SUSE-SU-2015:0581-1
SUSE-SU-2015:0736-1
SUSE-SU-2015:1174-1
SUSE-SU-2015:1376-1
USN-2419-1
USN-2420-1
USN-2447-1
USN-2447-2
USN-2448-1
USN-2513-1
USN-2514-1

Affected Products

Alt Linux
Centos
Linux Kernel
Red Hat
Suse
Ubuntu