PT-2014-8423

CVE-2014-8133

·

Published

2014-12-17

·

Updated

2024-06-15

Description by

CVSS 2.0
2.1
Low
MetricsAV:L/AC:L/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.18.1
Description The issue allows local users to bypass the espfix protection mechanism, making it easier to bypass the ASLR protection mechanism. This can be achieved via a crafted application that makes a set thread area system call and later reads a 16-bit value.
Recommendations For Linux kernel versions prior to 3.18.1, update to version 3.18.1 or later to resolve the issue.
Exploitability
Exploit
Fix
Vendors
Affected products
Weakness enumeration
Related identifiers
ALT-PU-2015-1018
ALT-PU-2015-1794
CESA-2015_1272
DLA-155-1
DSA-3128-1
MGASA-2015-0006
MGASA-2015-0075
MGASA-2015-0076
MGASA-2015-0077
MGASA-2015-0078
OPENSUSE-SU-2014_1669-1
OPENSUSE-SU-2014_1677-1
OPENSUSE-SU-2014_1678-1
OPENSUSE-SU-2016_0301-1
OPENSUSE-SU-2024:10128-1
RHSA-2015:1272
RHSA-2015_1272
SUSE-RU-2015:0621-1
SUSE-SU-2014_1698-1
SUSE-SU-2015:0481-1
SUSE-SU-2015:0581-1
SUSE-SU-2015:0652-1
SUSE-SU-2015:0736-1
SUSE-SU-2015:1174-1
SUSE-SU-2015:1376-1
USN-2490-1
USN-2491-1
USN-2492-1
USN-2493-1
USN-2515-1
USN-2516-1
USN-2516-2
USN-2516-3
USN-2517-1
USN-2518-1
Found an issue in the description? Have something to add? Feel free to write us 👾