Lucene search

K
cvelistMitreCVELIST:CVE-2014-9585
HistoryJan 09, 2015 - 9:00 p.m.

CVE-2014-9585

2015-01-0921:00:00
mitre
raw.githubusercontent.com
1

5.9 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.6%

The vdso_addr function in arch/x86/vdso/vma.c in the Linux kernel through 3.18.2 does not properly choose memory locations for the vDSO area, which makes it easier for local users to bypass the ASLR protection mechanism by guessing a location at the end of a PMD.