PT-2019-7091 · Linux+1 · Linux Kernel+1

Chris + 1 · Published 2014-10-23 · Updated 2024-08-06 · CVE-2014-3180

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.17

Description There is a possible out-of-bounds read in the Linux kernel. The restart syscall function uses uninitialized data when restarting compat sys nanosleep. However, this issue is disputed because the code path is reportedly unreachable.

Recommendations For Linux kernel versions prior to 3.17, update to version 3.17 or later to resolve the issue. As a temporary workaround, consider restricting access to the compat sys nanosleep function until a patch is available.

Exploit

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

ALT-PU-2014-2297

ALT-PU-2015-1794

CVE-2014-3180

Affected Products

Alt Linux

Linux Kernel

References · 367

• 🔥 https://github.com/retme7/CVE-2014-4322_poc · Exploit
• 🔥 https://github.com/panyu6325/CVE-2015-1805 · Exploit
• 🔥 https://github.com/laginimaineb/cve-2014-4322 · Exploit
• 🔥 https://github.com/marcograss/cve-2014-4323 · Exploit
• 🔥 https://github.com/FloatingGuy/cve-2015-1805 · Exploit
• 🔥 https://github.com/ireshchaminda1/Android-Privilege-Escalation-Remote-Access-Vulnerability-CVE-2015-1805 · Exploit
• https://bdu.fstec.ru/vul/2015-05784 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8481 · Security Note
• https://bdu.fstec.ru/vul/2015-06239 · Security Note
• https://bdu.fstec.ru/vul/2015-05817 · Security Note
• https://bdu.fstec.ru/vul/2015-05685 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7421 · Security Note
• https://bdu.fstec.ru/vul/2015-06249 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6410 · Security Note
• https://bdu.fstec.ru/vul/2015-05804 · Security Note