7.8

CVE-2014-9322

Exploit
arch/x86/kernel/entry_64.S in the Linux kernel before 3.17.5 does not properly handle faults associated with the Stack Segment (SS) segment register, which allows local users to gain privileges by triggering an IRET instruction that leads to access to a GS Base address from the wrong space.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version < 3.2.65
Linux ≫ Linux Kernel Version >= 3.3 < 3.4.106
Linux ≫ Linux Kernel Version >= 3.5 < 3.10.62
Linux ≫ Linux Kernel Version >= 3.11 < 3.12.35
Linux ≫ Linux Kernel Version >= 3.13 < 3.14.26
Linux ≫ Linux Kernel Version >= 3.15 < 3.16.35
Linux ≫ Linux Kernel Version >= 3.17 < 3.17.5
Redhat ≫ Enterprise Linux Eus Version 5.6
Canonical ≫ Ubuntu Linux Version 10.04 SwEdition -
Opensuse ≫ Evergreen Version 11.4
Suse ≫ Suse Linux Enterprise Server Version 10 Update sp4 SwEdition ltss
Google ≫ Android Version 6.0
Google ≫ Android Version 6.0.1
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.45% 0.702
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NIST 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
CWE-269 Improper Privilege Management

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html
Third Party Advisory
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html
Third Party Advisory
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html
Third Party Advisory
Mailing List
http://marc.info/?l=bugtraq&m=142722450701342&w=2
Third Party Advisory
Mailing List
http://marc.info/?l=bugtraq&m=142722544401658&w=2
Third Party Advisory
Mailing List
http://source.android.com/security/bulletin/2016-04-02.html
Patch
Third Party Advisory
http://www.ubuntu.com/usn/USN-2491-1
Third Party Advisory
http://secunia.com/advisories/62336
Broken Link
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6f442be2fb22be02cafa606f1769fa1e6f894441
https://github.com/torvalds/linux/commit/6f442be2fb22be02cafa606f1769fa1e6f894441
Patch
Third Party Advisory
http://www.openwall.com/lists/oss-security/2014/12/15/6
Patch
Third Party Advisory
Mailing List
http://osvdb.org/show/osvdb/115919
Broken Link
http://rhn.redhat.com/errata/RHSA-2014-1998.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2014-2008.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2014-2028.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2014-2031.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-0009.html
Third Party Advisory
http://www.exploit-db.com/exploits/36266
Third Party Advisory
Exploit
VDB Entry
http://www.zerodayinitiative.com/advisories/ZDI-16-170
Third Party Advisory
VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1172806
Patch
Third Party Advisory
Issue Tracking
https://help.joyent.com/entries/98788667-Security-Advisory-ZDI-CAN-3263-ZDI-CAN-3284-and-ZDI-CAN-3364-Vulnerabilities
Third Party Advisory
Permissions Required
https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.17.5
Patch
Vendor Advisory
Mailing List