7.2

CVE-2014-3534

arch/s390/kernel/ptrace.c in the Linux kernel before 3.15.8 on the s390 platform does not properly restrict address-space control operations in PTRACE_POKEUSR_AREA requests, which allows local users to obtain read and write access to kernel memory locations, and consequently gain privileges, via a crafted application that makes a ptrace system call.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version < 3.2.62
Linux ≫ Linux Kernel Version >= 3.3 < 3.4.101
Linux ≫ Linux Kernel Version >= 3.5 < 3.10.51
Linux ≫ Linux Kernel Version >= 3.11 < 3.12.27
Linux ≫ Linux Kernel Version >= 3.13 < 3.14.15
Linux ≫ Linux Kernel Version >= 3.15 < 3.15.8
Debian ≫ Debian Linux Version7.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.07% 0.193
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
CWE-269 Improper Privilege Management

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

http://www.securityfocus.com/bid/68940
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1030683
Third Party Advisory
VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1114089
Third Party Advisory
Issue Tracking