6.9

CVE-2014-9529

Race condition in the key_gc_unused_keys function in security/keys/gc.c in the Linux kernel through 3.18.2 allows local users to cause a denial of service (memory corruption or panic) or possibly have unspecified other impact via keyctl commands that trigger access to a key structure member during garbage collection of a key.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version < 3.2.67
Linux ≫ Linux Kernel Version >= 3.3 < 3.4.107
Linux ≫ Linux Kernel Version >= 3.5 < 3.10.67
Linux ≫ Linux Kernel Version >= 3.11 <= 3.12.37
Linux ≫ Linux Kernel Version >= 3.13 <= 3.14.31
Linux ≫ Linux Kernel Version >= 3.15 < 3.16.35
Linux ≫ Linux Kernel Version >= 3.17 < 3.18.5
Opensuse ≫ Opensuse Version 13.1
Fedoraproject ≫ Fedora Version 20
Fedoraproject ≫ Fedora Version 21
Debian ≫ Debian Linux Version 7.0
Debian ≫ Debian Linux Version 8.0
Canonical ≫ Ubuntu Linux Version 10.04 SwEdition lts
Canonical ≫ Ubuntu Linux Version 12.04 SwEdition lts
Canonical ≫ Ubuntu Linux Version 14.04 SwEdition lts
Canonical ≫ Ubuntu Linux Version 14.10
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.34% 0.256
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.9 3.4 10
AV:L/AC:M/Au:N/C:C/I:C/A:C
CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.

http://www.debian.org/security/2015/dsa-3128
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-0864.html
Third Party Advisory
http://www.securitytracker.com/id/1036763
Third Party Advisory
VDB Entry
http://www.ubuntu.com/usn/USN-2513-1
Third Party Advisory
http://www.ubuntu.com/usn/USN-2514-1
Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2015:058
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00009.html
Third Party Advisory
Mailing List
http://www.ubuntu.com/usn/USN-2515-1
Third Party Advisory
http://www.ubuntu.com/usn/USN-2516-1
Third Party Advisory
http://www.ubuntu.com/usn/USN-2517-1
Third Party Advisory
http://www.ubuntu.com/usn/USN-2518-1
Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147864.html
Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147973.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-1137.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-1138.html
Third Party Advisory
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a3a8784454692dd72e5d5d34dcdab17b4420e74c
Broken Link
http://www.openwall.com/lists/oss-security/2015/01/06/10
Patch
Third Party Advisory
Mailing List
http://www.securityfocus.com/bid/71880
Third Party Advisory
VDB Entry
http://www.ubuntu.com/usn/USN-2511-1
Third Party Advisory
http://www.ubuntu.com/usn/USN-2512-1
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1179813
Patch
Third Party Advisory
Issue Tracking
https://exchange.xforce.ibmcloud.com/vulnerabilities/99641
Third Party Advisory
VDB Entry
https://github.com/torvalds/linux/commit/a3a8784454692dd72e5d5d34dcdab17b4420e74c
Patch
Third Party Advisory