PT-2014-9110 · Opensuse+4 · Kernel-Xen+27

Published 1970-01-01 · Updated 2021-01-19 · CVE-2014-4508

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions openSUSE kernel-default (affected versions not specified) openSUSE kernel-trace-base (affected versions not specified) openSUSE kernel-xen (affected versions not specified) openSUSE kernel-vanilla (affected versions not specified) openSUSE kernel-desktop (affected versions not specified) openSUSE kernel-pae (affected versions not specified) openSUSE kernel-ec2 (affected versions not specified) openSUSE kernel-debug (affected versions not specified) openSUSE kernel-source (affected versions not specified) openSUSE kernel-syms (affected versions not specified) openSUSE kernel-devel (affected versions not specified) openSUSE kernel-docs (affected versions not specified) openSUSE libipset3 (affected versions not specified) openSUSE libipset3-debuginfo (affected versions not specified) openSUSE ipset (affected versions not specified) openSUSE ipset-debuginfo (affected versions not specified) openSUSE ipset-debugsource (affected versions not specified) openSUSE ipset-kmp-default (affected versions not specified) openSUSE ipset-kmp-default-debuginfo (affected versions not specified) openSUSE ipset-kmp-desktop (affected versions not specified) openSUSE ipset-kmp-desktop-debuginfo (affected versions not specified) openSUSE ipset-kmp-pae (affected versions not specified) openSUSE ipset-kmp-pae-debuginfo (affected versions not specified) openSUSE ipset-kmp-xen (affected versions not specified) openSUSE ipset-kmp-xen-debuginfo (affected versions not specified) openSUSE ndiswrapper (affected versions not specified) openSUSE ndiswrapper-debuginfo (affected versions not specified) openSUSE ndiswrapper-debugsource (affected versions not specified) openSUSE ndiswrapper-kmp-default (affected versions not specified) openSUSE ndiswrapper-kmp-default-debuginfo (affected versions not specified) openSUSE ndiswrapper-kmp-desktop (affected versions not specified) openSUSE ndiswrapper-kmp-desktop-debuginfo (affected versions not specified) openSUSE ndiswrapper-kmp-pae (affected versions not specified) openSUSE ndiswrapper-kmp-pae-debuginfo (affected versions not specified) openSUSE pcfclock (affected versions not specified) openSUSE pcfclock-debuginfo (affected versions not specified) openSUSE pcfclock-debugsource (affected versions not specified) openSUSE pcfclock-kmp-default (affected versions not specified) openSUSE pcfclock-kmp-default-debuginfo (affected versions not specified) openSUSE pcfclock-kmp-desktop (affected versions not specified) openSUSE pcfclock-kmp-desktop-debuginfo (affected versions not specified) openSUSE pcfclock-kmp-pae (affected versions not specified) openSUSE pcfclock-kmp-pae-debuginfo (affected versions not specified) openSUSE cloop (affected versions not specified) openSUSE cloop-debuginfo (affected versions not specified) openSUSE cloop-debugsource (affected versions not specified) openSUSE cloop-kmp-default (affected versions not specified) openSUSE cloop-kmp-default-debuginfo (affected versions not specified) openSUSE cloop-kmp-desktop (affected versions not specified) openSUSE cloop-kmp-desktop-debuginfo (affected versions not specified) openSUSE cloop-kmp-pae (affected versions not specified) openSUSE cloop-kmp-pae-debuginfo (affected versions not specified) openSUSE cloop-kmp-xen (affected versions not specified) openSUSE cloop-kmp-xen-debuginfo (affected versions not specified) openSUSE vhba-kmp-default (affected versions not specified) openSUSE vhba-kmp-default-debuginfo (affected versions not specified) openSUSE vhba-kmp-desktop (affected versions not specified) openSUSE vhba-kmp-desktop-debuginfo (affected versions not specified) openSUSE vhba-kmp-pae (affected versions not specified) openSUSE vhba-kmp-pae-debuginfo (affected versions not specified) openSUSE vhba-kmp-xen (affected versions not specified) openSUSE vhba-kmp-xen-debuginfo (affected versions not specified) openSUSE iscsitarget (affected versions not specified) openSUSE iscsitarget-debuginfo (affected versions not specified) openSUSE iscsitarget-debugsource (affected versions not specified) openSUSE iscsitarget-kmp-default (affected versions not specified) openSUSE iscsitarget-kmp-default-debuginfo (affected versions not specified) openSUSE iscsitarget-kmp-desktop (affected versions not specified) openSUSE iscsitarget-kmp-desktop-debuginfo (affected versions not specified) openSUSE iscsitarget-kmp-pae (affected versions not specified) openSUSE iscsitarget-kmp-pae-debuginfo (affected versions not specified) openSUSE iscsitarget-kmp-xen (affected versions not specified) openSUSE iscsitarget-kmp-xen-debuginfo (affected versions not specified) openSUSE xtables-addons (affected versions not specified) openSUSE xtables-addons-debuginfo (affected versions not specified) openSUSE xtables-addons-debugsource (affected versions not specified) openSUSE xtables-addons-kmp-default (affected versions not specified) openSUSE xtables-addons-kmp-default-debuginfo (affected versions not specified) openSUSE xtables-addons-kmp-desktop (affected versions not specified) openSUSE xtables-addons-kmp-desktop-debuginfo (affected versions not specified) openSUSE xtables-addons-kmp-pae (affected versions not specified) openSUSE xtables-addons-kmp-pae-debuginfo (affected versions not specified) openSUSE xtables-addons-kmp-xen (affected versions not specified) openSUSE xtables-addons-kmp-xen-debuginfo (affected versions not specified) openSUSE crash (affected versions not specified) openSUSE crash-debuginfo (affected versions not specified) openSUSE crash-debugsource (affected versions not specified) openSUSE crash-devel (affected versions not specified) openSUSE crash-doc (affected versions not specified) openSUSE crash-eppic (affected versions not specified) openSUSE crash-eppic-debuginfo (affected versions not specified) openSUSE crash-gcore (affected versions not specified) openSUSE crash-gcore-debuginfo (affected versions not specified) openSUSE crash-kmp-default (affected versions not specified) openSUSE crash-kmp-default-debuginfo (affected versions not specified) openSUSE crash-kmp-desktop (affected versions not specified) openSUSE crash-kmp-desktop-debuginfo (affected versions not specified) openSUSE crash-kmp-pae (affected versions not specified) openSUSE crash-kmp-pae-debuginfo (affected versions not specified) openSUSE crash-kmp-xen (affected versions not specified) openSUSE crash-kmp-xen-debuginfo (affected versions not specified) openSUSE hdjmod-kmp-default (affected versions not specified) openSUSE hdjmod-kmp-default-debuginfo (affected versions not specified) openSUSE hdjmod-kmp-desktop (affected versions not specified) openSUSE hdjmod-kmp-desktop-debuginfo (affected versions not specified) openSUSE hdjmod-kmp-pae (affected versions not specified) openSUSE hdjmod-kmp-pae-debuginfo (affected versions not specified) openSUSE hdjmod-kmp-xen (affected versions not specified) openSUSE hdjmod-kmp-xen-debuginfo (affected versions not specified) openSUSE kernel-trace (affected versions not specified) openSUSE kernel-trace-base-debuginfo (affected versions not specified) openSUSE kernel-trace-debuginfo (affected versions not specified) openSUSE kernel-trace-debugsource (affected versions not specified) openSUSE kernel-trace-devel (affected versions not specified) openSUSE kernel-trace-devel-debuginfo (affected versions not specified) openSUSE kernel-xen-base (affected versions not specified) openSUSE kernel-xen-base-debuginfo (affected versions not specified) openSUSE kernel-xen-debuginfo (affected versions not specified) openSUSE kernel-xen-debugsource (affected versions not specified) openSUSE kernel-xen-devel (affected versions not specified) openSUSE kernel-xen-devel-debuginfo (affected versions not specified)

Description The issue affects multiple packages in the openSUSE operating system, allowing for remote exploitation. This can lead to a violation of confidentiality, integrity, and availability of protected information. The vulnerability can be exploited by local users to cause a denial of service (OOPS and system crash) via an invalid syscall number.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Race Condition

Weakness Enumeration

CWE-189

CWE-362

Related Identifiers

ALT-PU-2014-1847

ALT-PU-2015-1794

BDU:2015-05685

BDU:2015-05686

BDU:2015-05687

BDU:2015-05688

BDU:2015-05689

BDU:2015-05690

BDU:2015-05691

BDU:2015-05692

BDU:2015-05693

BDU:2015-05694

BDU:2015-05695

BDU:2015-05696

BDU:2015-05697

BDU:2015-05698

BDU:2015-05699

BDU:2015-05700

BDU:2015-05701

BDU:2015-05702

BDU:2015-05703

BDU:2015-05704

BDU:2015-05705

BDU:2015-05706

BDU:2015-05707

BDU:2015-05708

BDU:2015-05709

BDU:2015-05710

BDU:2015-05711

BDU:2015-05712

BDU:2015-05713

BDU:2015-05714

BDU:2015-05715

BDU:2015-05716

BDU:2015-05717

BDU:2015-05718

BDU:2015-05719

BDU:2015-05720

BDU:2015-05721

BDU:2015-05722

BDU:2015-05723

BDU:2015-05724

BDU:2015-05725

BDU:2015-05726

BDU:2015-05727

BDU:2015-05728

BDU:2015-05729

BDU:2015-05730

BDU:2015-05731

BDU:2015-05732

BDU:2015-05733

BDU:2015-05734

BDU:2015-05735

BDU:2015-05736

BDU:2015-05737

BDU:2015-05738

BDU:2015-05739

BDU:2015-05740

BDU:2015-05741

BDU:2015-05742

BDU:2015-05743

BDU:2015-05744

BDU:2015-05745

BDU:2015-05746

BDU:2015-05747

BDU:2015-05748

BDU:2015-05749

BDU:2015-05750

BDU:2015-05751

BDU:2015-05752

BDU:2015-05753

BDU:2015-05754

BDU:2015-05755

BDU:2015-05756

BDU:2015-05757

BDU:2015-05758

BDU:2015-05759

BDU:2015-05760

BDU:2015-05761

BDU:2015-05762

BDU:2015-05763

BDU:2015-05764

BDU:2015-05765

BDU:2015-05766

BDU:2015-05767

BDU:2015-05768

BDU:2015-05769

BDU:2015-05770

BDU:2015-05771

BDU:2015-05772

BDU:2015-05773

BDU:2015-05774

BDU:2015-05775

BDU:2015-05776

BDU:2015-05777

BDU:2015-05778

BDU:2015-05779

BDU:2015-05780

BDU:2015-05781

BDU:2015-05782

BDU:2015-05783

BDU:2015-05784

BDU:2015-05785

BDU:2015-05786

BDU:2015-05787

BDU:2015-05788

BDU:2015-05789

BDU:2015-05790

BDU:2015-05791

BDU:2015-05792

BDU:2015-05793

BDU:2015-05794

BDU:2015-05795

BDU:2015-05796

BDU:2015-05797

BDU:2015-05798

BDU:2015-05799

BDU:2015-05800

BDU:2015-05801

BDU:2015-05802

BDU:2015-05803

BDU:2015-05804

BDU:2015-05805

BDU:2015-05806

BDU:2015-05807

BDU:2015-05808

BDU:2015-05809

BDU:2015-05810

BDU:2015-05811

BDU:2015-05812

BDU:2015-05813

BDU:2015-05814

BDU:2015-05815

BDU:2015-05816

BDU:2015-05817

BDU:2015-05818

BDU:2015-05819

BDU:2015-05820

BDU:2015-05821

BDU:2015-05822

BDU:2015-05823

BDU:2015-05824

BDU:2015-05825

BDU:2015-05826

BDU:2015-05827

BDU:2015-05828

BDU:2015-05829

BDU:2015-05830

BDU:2015-05831

BDU:2015-05832

BDU:2015-05833

BDU:2015-05834

BDU:2015-05835

BDU:2015-05836

BDU:2015-05837

BDU:2015-05838

BDU:2015-05839

BDU:2015-05840

BDU:2015-05841

BDU:2015-05842

BDU:2015-05843

CVE-2014-4508

DLA-103-1

MGASA-2014-0316

MGASA-2014-0318

MGASA-2014-0330

MGASA-2014-0331

MGASA-2014-0332

MGASA-2014-0336

MGASA-2014-0337

MGASA-2015-0077

OPENSUSE-SU-2014_0957-1

OPENSUSE-SU-2014_0985-1

OPENSUSE-SU-2014_1669-1

OPENSUSE-SU-2014_1677-1

RHSA-2021:0181

RHSA-2021_0181

SUSE-RU-2015:0621-1

SUSE-SU-2015:0481-1

SUSE-SU-2015:0581-1

SUSE-SU-2015:0652-1

SUSE-SU-2015:0736-1

SUSE-SU-2015:1174-1

SUSE-SU-2015:1376-1

USN-2332-1

USN-2333-1

USN-2334-1

USN-2336-1

USN-2337-1

Affected Products

Alt Linux

Red Hat

Suse

Ubuntu

Cloop

Crash

Hdjmod-Kmp-Default

Ipset

Iscsitarget

Kernel-Debug

Kernel-Default

Kernel-Desktop

Kernel-Devel

Kernel-Doc

Kernel-Ec2

Kernel-Pae

Kernel-Source

Kernel-Syms

Kernel-Trace

Kernel-Trace-Base

Kernel-Vanilla

Kernel-Xen

Kernel-Xen-Base

Libipset3

Ndiswrapper

Pcfclock

Vhba-Kmp-Default

Xtables-Addons

References · 676

• 🔥 https://github.com/retme7/CVE-2014-4322_poc · Exploit
• 🔥 https://github.com/panyu6325/CVE-2015-1805 · Exploit
• 🔥 https://github.com/laginimaineb/cve-2014-4322 · Exploit
• 🔥 https://github.com/marcograss/cve-2014-4323 · Exploit
• 🔥 https://github.com/RKX1209/CVE-2014-9322 · Exploit
• 🔥 https://github.com/FloatingGuy/cve-2015-1805 · Exploit
• 🔥 https://github.com/ireshchaminda1/Android-Privilege-Escalation-Remote-Access-Vulnerability-CVE-2015-1805 · Exploit
• https://bdu.fstec.ru/vul/2015-09322 · Security Note
• https://ubuntu.com/security/CVE-2014-0181 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-05721 · Security Note
• https://bdu.fstec.ru/vul/2015-05828 · Security Note
• https://bdu.fstec.ru/vul/2015-07006 · Security Note
• https://bdu.fstec.ru/vul/2015-09208 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5471 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7842 · Security Note