PT-2014-8423

CVE-2014-8133

·

Publicado

2014-12-17

·

Atualizado

2024-06-15

Descrição por

CVSS 2.0
2.1
Baixa
MétricasAV:L/AC:L/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.18.1
Description The issue allows local users to bypass the espfix protection mechanism, making it easier to bypass the ASLR protection mechanism. This can be achieved via a crafted application that makes a set thread area system call and later reads a 16-bit value.
Recommendations For Linux kernel versions prior to 3.18.1, update to version 3.18.1 or later to resolve the issue.
Explorabilidade
Exploit
Correção
Fornecedores
Produtos afetados
Enumeração de fraquezas
Identificadores relacionados
ALT-PU-2015-1018
ALT-PU-2015-1794
CESA-2015_1272
DLA-155-1
DSA-3128-1
MGASA-2015-0006
MGASA-2015-0075
MGASA-2015-0076
MGASA-2015-0077
MGASA-2015-0078
OPENSUSE-SU-2014_1669-1
OPENSUSE-SU-2014_1677-1
OPENSUSE-SU-2014_1678-1
OPENSUSE-SU-2016_0301-1
OPENSUSE-SU-2024:10128-1
RHSA-2015:1272
RHSA-2015_1272
SUSE-RU-2015:0621-1
SUSE-SU-2014_1698-1
SUSE-SU-2015:0481-1
SUSE-SU-2015:0581-1
SUSE-SU-2015:0652-1
SUSE-SU-2015:0736-1
SUSE-SU-2015:1174-1
SUSE-SU-2015:1376-1
USN-2490-1
USN-2491-1
USN-2492-1
USN-2493-1
USN-2515-1
USN-2516-1
USN-2516-2
USN-2516-3
USN-2517-1
USN-2518-1
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾