6.9

CVE-2014-4943

The PPPoL2TP feature in net/l2tp/l2tp_ppp.c in the Linux kernel through 3.15.6 allows local users to gain privileges by leveraging data-structure differences between an l2tp socket and an inet socket.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 2.6.23 < 3.2.62
Linux ≫ Linux Kernel Version >= 3.3 < 3.4.102
Linux ≫ Linux Kernel Version >= 3.5 < 3.10.52
Linux ≫ Linux Kernel Version >= 3.11 < 3.12.27
Linux ≫ Linux Kernel Version >= 3.13 < 3.14.16
Linux ≫ Linux Kernel Version >= 3.15 < 3.15.9
Opensuse ≫ Opensuse Version 11.4
Suse ≫ Linux Enterprise Desktop Version 11 Update sp3
Suse ≫ Linux Enterprise Server Version 11 Update sp2 SwEdition ltss
Suse ≫ Linux Enterprise Server Version 11 Update sp3
Suse ≫ Linux Enterprise Server Version 11 Update sp3 SwPlatform vmware
Debian ≫ Debian Linux Version 7.0
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.1% 0.793
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.9 3.4 10
AV:L/AC:M/Au:N/C:C/I:C/A:C
CWE-269 Improper Privilege Management

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html
Third Party Advisory
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html
Third Party Advisory
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00006.html
Third Party Advisory
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00007.html
Third Party Advisory
Mailing List
http://secunia.com/advisories/60011
Third Party Advisory
http://secunia.com/advisories/59790
Third Party Advisory
http://www.debian.org/security/2014/dsa-2992
Third Party Advisory
http://linux.oracle.com/errata/ELSA-2014-0924.html
Third Party Advisory
http://linux.oracle.com/errata/ELSA-2014-3047.html
Third Party Advisory
http://linux.oracle.com/errata/ELSA-2014-3048.html
Third Party Advisory
http://secunia.com/advisories/60220
Third Party Advisory
http://secunia.com/advisories/60380
Third Party Advisory
http://secunia.com/advisories/60393
Third Party Advisory
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=3cf521f7dc87c031617fd47e4b7aa2593c2f3daf
Third Party Advisory
Broken Link
http://openwall.com/lists/oss-security/2014/07/17/1
Third Party Advisory
Mailing List
http://osvdb.org/show/osvdb/109277
Broken Link
http://rhn.redhat.com/errata/RHSA-2014-1025.html
Third Party Advisory
http://secunia.com/advisories/60071
Third Party Advisory
http://www.exploit-db.com/exploits/36267
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1030610
Third Party Advisory
VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1119458
Third Party Advisory
Issue Tracking
https://exchange.xforce.ibmcloud.com/vulnerabilities/94665
Third Party Advisory
VDB Entry
https://github.com/torvalds/linux/commit/3cf521f7dc87c031617fd47e4b7aa2593c2f3daf
Patch
Third Party Advisory